Learn beginner-friendly strategies and free tools for streamlining your organization's data processes to support and strengthen cybersecurity.
When a cyber security incident occurs, how does anyone know? Data must leave workstations and servers, bounce across the network, and land in a central database before analysts can use it. This project-based book covers that complex space between an organization's computers and the security analyst tasked with protecting them. The guidance is straightforward, and the focus is on streamlining the process of gathering, transforming, and storing cybersecurity data using free and open-source tools.
The author elaborates on core but often overlooked logging strategies, while also emphasizing the importance of standardizing data, using encryption to protect transmitted data, and creating "data pipelines" that support cybersecurity, data analytics, and automation needs alike. You'll how to:
• Implement core logging strategies using free tools such as Elastic stack
• Transform data to fit your needs, and configure your tools to send it back and forth
• Secure your logging infrastructure by encrypting connections using TLS and SSH
• Handle version control and backups with Git, and improve your efficiency with caching
By the end, you'll know how to enrich your security data, protect it from unauthorized parties, and automate your workflow in the process – leaving more room for creative thinking. James Bonifield is a civilian IT Cybersecurity Specialist with the U.S. Army Corps of Engineers (USACE) where he develops data pipelines for his team, in addition to performing analysis and handling incidents. Prior to his time at USACE, James worked in civilian roles for the National Geospatial-Intelligence Agency and U.S. Marine Corps Forces Cyberspace Command, and as a contractor for the Defense Information Systems Agency in multiple cyber security roles.
James has delivered specialized technical training to military, civilian, and contractor teams, and federal law enforcement. He has also mentored students exploring information security.
James holds a Bachelor of Science from Western Governors University and multiple certifications including OSCP, GXPN, and CISSP. He is currently diving into cloud architecture and even more penetration testing material. James enjoys spending time with his family and scruffy rescue dogs.
