-: In this section of the course, 2 2
we're going to cover appliance monitoring. 3 3
Now our focus in this section is going to continue to be 4 4
on domain one, security operations, 5 5
but this time we'll be focusing on objectives 1.1 and 1.3. 6 6
Objective 1.1 states that you must be able 7 7
to explain the importance of system 8 8
and network architecture concepts in security operations. 9 9
For this objective, we are really going to be focused 10 10
on log ingestion and your ability to read 11 11
and analyze a log to identify a given threat 12 12
against the system or network. 13 13
Objective, 1.3 states that, given a scenario, 14 14
you must use appropriate tools 15 15
or techniques to determine malicious activity. 16 16
Again, here we are really going to be focused 17 17
on the log analysis 18 18
and correlation portions of this objective. 19 19
Now, as we move through this section, we're going to start 20 20
with reviewing firewall logs and their configurations. 21 21
Then we're going to move into proxy logs and a specialized type 22 22
of firewall called a web application firewall. 23 23
Next, we're going to explore the configuration 24 24
of IDS and IPS devices and how to conduct 25 25
log reviews on those devices. 26 26
After that, we're going to take a look at port security 27 27
and the configuration of network access control 28 28
known as NAC or NAC. 29 29
Then we're going to move into a hands-on demonstration 30 30
that shows you how to analyze output 31 31
from some security appliance logs just like you would 32 32
in the real world as a cybersecurity analyst. 33 33
Finally, we're going to take a short quiz to see 34 34
what you learned during this section of the course 35 35
and review each of those quiz questions fully 36 36
to ensure you know why the right answers were right. 37 37
So let's start exploring the world of appliance monitoring 38 38
and log analysis in this section of the course.