Security Monitoring with Wazuh: A hands-on guide to effective enterprise security using real-life use cases in Wazuh
Paperback
NetworkingComputer SecuritySystem Administration
ISBN13: 9781837632152
Publisher: Packt Publishing
Published: Apr 12 2024
Pages: 322
Weight: 1.22
Height: 0.67 Width: 7.50 Depth: 9.25
Language: English
This book equips you with the knowledge to effectively deploy and utilize Wazuh, helping your organization stay resilient against evolving cybersecurity threats.
- Santiago Bassett, Founder and CEO, Wazuh
Key Features:
- Written by a cybersecurity expert recognized for his leadership and contributions in the industry
- Gain practical insights on using Wazuh for threat protection and compliance
- Implement security monitoring aligned with MITRE ATT&CK, PCI DSS, and GDPR
- Deploy Wazuh in cloud environments for security and compliance
- Purchase of the print or Kindle book includes a free PDF eBook
Book Description:
Strengthen your cybersecurity posture with Wazuh's powerful security monitoring and compliance capabilities.
Security Monitoring with Wazuh is a comprehensive, hands-on guide that helps you deploy, configure, and optimize Wazuh to detect threats, automate incident response, and enforce compliance. With real-world use cases, step-by-step configurations, and tool integrations, this book equips you to build an enterprise-grade defense system.
You'll begin by setting up an Intrusion Detection System (IDS) using Wazuh and integrating Suricata to monitor network and host-based threats. Moving forward, you'll explore malware detection, vulnerability assessment, and security automation with SOAR. The book also covers threat intelligence, incident response, and proactive threat hunting, helping you detect and mitigate cybersecurity risks effectively.
Beyond detection, you'll enforce compliance with industry standards such as MITRE ATT&CK, PCI DSS, and GDPR, ensuring regulatory adherence and security best practices. By integrating Wazuh with TheHive, Cortex, MISP, and other security tools, you'll streamline threat analysis and response.
By the end of this book, you'll master Wazuh's full potential, enabling you to deploy, manage, and enhance security monitoring across your infrastructure-from on-premises to cloud environments.
What You Will Learn:
- Set up an intrusion detection system (IDS) using Wazuh and Suricata
- Implement file integrity monitoring to detect unauthorized changes
- Integrate MISP for automated threat intelligence and IOC detection
- Leverage TheHive and Cortex for security automation and incident response
- Deploy Wazuh for proactive malware detection and endpoint security
- Use Shuffle to automate security operations and streamline responses
- Hunt for threats with Osquery, log analysis, and MITRE ATT&CK mapping
- Ensure compliance with PCI DSS, GDPR, and security best practices
Who this book is for:
This book is designed for SOC analysts, security engineers, and security architects looking to deploy Wazuh for threat detection, incident response, and compliance monitoring. It provides practical guidance on setting up open-source SOC capabilities, including file integrity monitoring, security automation, and threat intelligence. Managed service providers seeking a scalable security monitoring system will also benefit. Basic knowledge of IT, cybersecurity, cloud, and Linux is recommended.
Table of Contents
- Intrusion Detection System (IDS) Using Wazuh
- Malware Detection Using Wazuh
- Threat Intelligence and Analysis
- Security Automation and Orchestration Using Shuffle
- Incident Response with Wazuh
- Threat Hunting with Wazuh
- Vulnerability Detection and Configuration Assessment
- Appendix
- Glossary
Also from
Gupta, Rajneesh
Also in
Computer Security
Dawn of the Code War: America's Battle Against Russia, China, and the Rising Global Cyber Threat
Carlin, John P.
Graff, Garrett M.
Paperback
CompTIA Network+ Certification All-in-One Exam Guide, Ninth Edition (Exam N10-009)
Weissman, Jonathan S.
Paperback
5 Habits of the Tech-Ready Family: Raising Wise Kids in a Wild Digital World
McKenna, Chris
Paperback
Comptia A+ Complete Study Guide, 2-Volume Set: Volume 1 Core 1 Exam 220-1201 and Volume 2 Core 2 Exam 220-1202
Docter, Quentin
Buhagiar, Jon
Paperback
Spies, Lies, and Cybercrime: Cybersecurity Tactics to Outsmart Hackers and Disarm Scammers
O'Neill, Eric
Hardcover
Isc2 Cissp Official Study Guide & Practice Tests Bundle
Gibson, Darril
Chapple, Mike
Stewart, James Michael
Paperback
Blown to Bits: Your Life, Liberty, and Happiness After the Digital Explosion
Abelson, Hal
Ledeen, Ken
Lewis, Harry
Paperback
Linux Basics for Hackers, 2nd Edition: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
Computer Hacking: The Crash Course Guide to Learning Computer Hacking Fast & How to Hack for Beginners
Warren, Tim
Paperback
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide
Gibson, Darril
Chapple, Mike
Stewart, James Michael
Paperback
Comptia Security+ Study Guide with Over 500 Practice Test Questions: Exam Sy0-701
Chapple, Mike
Seidl, David
Paperback
Hacking & Tor: The Complete Beginners Guide To Hacking, Tor, & Accessing The Deep Web & Dark Web
Jones, Jack
Paperback
Password Logbook (Hip Floral): Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location
Editors of Rock Point
Hardcover
Don't Trust Your Gut: Using Data to Get What You Really Want in Life
Stephens-Davidowitz, Seth
Paperback
Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Greenberg, Andy
Paperback
Cisa Certified Information Systems Auditor Study Guide and Practice Tests Bundle: Covers 2024 Exam Objectives
Chapple, Mike
Gregory, Peter H.
Paperback
From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification
Martin-Vegue, Tony
Paperback
Home Assistant for Beginners: Build a private smart home without relying on the cloud
Haagenrud, Thom
Paperback
The Art of Deception: Controlling the Human Element of Security
Mitnick, Kevin D.
Simon, William L.
Paperback
Comptia A+ Complete Review Guide: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Paperback
Learning Cybersecurity Fundamentals: A Practical Guide to Essential Cybersecurity Concepts
Dove, Nicole
Paperback
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
Aumasson, Jean-Philippe
Paperback
Comptia A+ Complete Certification Kit: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Docter, Quentin
Buhagiar, Jon
Paperback
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Paperback
Cyber War: The Next Threat to National Security and What to Do about It
Clarke, Richard A.
Knake, Robert
Paperback
AWS Certified Security Study Guide: Specialty (Scs-C02) Exam
Mu¿oz, Mauricio
Moraes, Alexandre M. S. P.
Goldfarb, Dario Lucas
Paperback
Container Security: Fundamental Technology Concepts That Protect Cloud Native Applications
Rice, Liz
Paperback
Humorous Cryptograms: 300 Large Print Puzzles To Keep You Entertained (Large Print Edition)
Nest, Game
Paperback
Scam Me If You Can: Simple Strategies to Outsmart Today's Rip-Off Artists
Abagnale, Frank W.
Paperback
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
Zetter, Kim
Paperback
XRP - The Cryptocurrency for Banks: How XRP is revolutionizing cross-border payments and redefining the financial system
Satoshi, Degen
Paperback
Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition
Reiber, Lee
Paperback
Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World
Menn, Joseph
Paperback
The Future of Hacking: The Rise of Cybercrime and the Fight to Keep Us Safe
Scherling, Laura S.
Hardcover
A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend Them Back
Schneier, Bruce
Paperback
Hackers Underground Knowledge: Quick and easy way to learn secret hacker techniques
Kohler, Martin
Paperback
Privacy and Security for Large Language Models: Hands-On Privacy-Preserving Techniques for Personalized AI
Lin, Baihan
Paperback
AI Governance Playbook: How to Secure, Control, and Optimize Artificial Intelligence Initiatives
Smallwood, Robert F.
Surdak, Chris
Paperback
The Cybernetic Society: How Humans and Machines Will Shape the Future Together
Husain, Amir
Hardcover
Hacking and Security: The Comprehensive Guide to Penetration Testing and Cybersecurity
Kloep, Peter
Kofler, Michael
Gebeshuber, Klaus
Paperback
The Spacecraft Hacker's Handbook: Exploiting Ground Stations, Flight Software, and Satellite Terminals
Olchawa, Andrzej
Starcik, Milenko
Paperback
The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
Stuttard, Dafydd
Pinto, Marcus
Paperback
The Smartest Person in the Room: The Root Cause and New Solution for Cybersecurity
Espinosa, Christian
Paperback
Understanding Digital Resilience: Foresight and Navigation through Cyber Heavy Weather
Rattray, Gregory
Lee, Seungmin Helen
Pelekis, Ian
Paperback
Dissecting the Dark Web: Reverse Engineering the Tools of the Underground Economy
Kaye, Lindsay
Paperback
The Book of Pf, 4th Edition: A No-Nonsense Guide to the OpenBSD Firewall
Hansteen, Peter N. M.
Paperback
The Secure Board: How To Be Confident That Your Organisation Is Cyber Safe
Pales, Claire
Leibel, Anna
Paperback
Comptia A+ Complete Practice Tests: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
O'Shea, Audrey
Paperback
Data Engineering for Cybersecurity: Build Secure Data Pipelines with Free and Open-Source Tools
Bonifield, James
Paperback
Cilium: Up and Running: Cloud Native Networking, Security, and Observability
Nikolic, Filip
Laverack, James
Vibert, Nico
Paperback
Web Application Security: Exploitation and Countermeasures for Modern Web Applications
Hoffman, Andrew
Paperback
The Fraud Fighter's AI Playbook: Strategies for the Genai Era
Maraney, Shoshana
Zamir, Chen
Saporta, Gilit
Paperback
Meshtastic: A Comprehensive Guide to Off-Grid Mesh Communication: Second Edition
Rodgers, David A., Jr.
Paperback
Learning Serverless Security: Hacking and Securing Serverless Cloud Applications on Aws, Azure, and Google Cloud
Lat, Joshua Arvin
Paperback
The CyberSecurity Leadership Handbook for the CISO and the CEO: How to Fix Decade-Old Issues and Protect Your Organization from Cyber Threats
Gaillard, Jean-Christophe
Paperback
Cybersecurity - Attack and Defense Strategies - Third Edition: Improve your security posture to mitigate risks and prevent attackers from infiltrating
Diogenes, Yuri
Ozkaya, Erdal
Paperback
Industrial Cybersecurity - Second Edition: Efficiently monitor the cybersecurity posture of your ICS environment
Ackerman, Pascal
Paperback
Red Team Engineering: The Art of Building Offensive Tools and Infrastructure
Erdmann, Casey
Paperback
Evasion Engineering: Building Custom Red Team Tools for Modern Defenses
Lasalvia, Michael
Chow, Dennis
Paperback
The Mathematics of Secrets: Cryptography from Caesar Ciphers to Digital Encryption
Holden, Joshua
Paperback
Cism Certified Information Security Manager All-In-One Exam Guide [With CD (Audio)]
Gregory, Peter H.
Paperback
Zero Trust Networks: Building Secure Systems in Untrusted Networks
Rais, Razi
Morillo, Christina
Gilman, Evan
Paperback
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Hardcover
Learn Computer Forensics - Second Edition: Your one-stop guide to searching, analyzing, acquiring, and securing digital evidence
Oettinger, William
Paperback
Network Programmability and Automation: Skills for the Next-Generation Network Engineer
Lowe, Scott S.
Oswalt, Matt
Adell, Christian
Paperback
Software Security for Developers: With Examples in Java and Spring
Spilca, Laurentiu
Saikali, Adib
Paperback
Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning
Fyodor
Lyon, Gordon
Paperback
Locksport: A Hackers Guide to Lockpicking, Impressioning, and Safe Cracking
Belgers, Walter
Weyers, Jos
Burrough, Matt
Paperback
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1201
Chapple, Mike
Paperback
Scams, Hacking, and Cybersecurity: The Ultimate Guide to Online Safety and Privacy
Brooks-Kempler, May
Paperback
Raising Humans in a Digital World: Helping Kids Build a Healthy Relationship with Technology
Graber, Diana
Paperback
Operation Carder Kaos: How One Agent Penetrated the Underground Economy
Latulip, Richard K.
Paperback
Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls That Derail Us
Dykstra, Josiah
Spafford, Eugene
Metcalf, Leigh
Paperback
IT Governance: An international guide to data security and ISO 27001/ISO 27002, Eighth edition
Watkins, Steve
Calder, Alan
Paperback
Digital Ethics in the Age of AI: Navigating the ethical frontier today and beyond
Mehan, Julie
Paperback
Agentic AI for Offensive Cybersecurity: Build and automate smarter penetration testing workflows using AI-driven agents
Yıldırım, Orhan
Paperback
Wireless Exploits And Countermeasures: Kali Linux Nethunter, Aircrack-NG, Kismet, And Wireshark
Botwright, Rob
Paperback
Building a Career in Cybersecurity: The Strategy and Skills You Need to Succeed
Diogenes, Yuri
Paperback
Intelligence-Driven Incident Response: Outwitting the Adversary
Roberts, Scott J.
Brown, Rebekah
Paperback
Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools
Jaswal, Nipun
Paperback
