Designing Cisco Security Infrastructure (SDSI)
¶ 5.1 SOC Tools For Incident Handling and Response
¶ 5.1.1 Introduction.
¶ 5.1.2 SIEM Solutions Design _ SOC Tools for Incident Handling and Response.
¶ 5.1.3 SOAR Systems _ SOC Tools for Incident Handling and Response.
¶ 5.1.4 Network Observability.
¶ 5.1.5 eBPF (extended Berkeley Packet Filters).
.png)
¶ 5.1.6 Summary.
¶ 5.2 Modify Design to Mitigate Risk
¶ 5.2.1 Introduction.
¶ 5.2.2 Risk Management Frameworks.
¶ 5.2.3 Compensating Controls.
¶ 5.2.4 SAFE Framework.
¶ 5.2.5 Design Practice Activity 1_ Selecting a Framework for a Government Contractor Network.
¶ 5.2.6 Design Practice Activity 2_ Designing Security Capabilities Using Cisco SAFE Framework.
¶ 5.2.7 Design Practice Activity 3_ Implementing Compensating Controls in a Legacy Banking System.
¶ 5.2.8 Summary.
¶ 5.3 Incident-Driven Security Ajustments
¶ 5.3.1 Introduction.
¶ 5.3.2 Post-Incident Response and Recovery _ Incident-Driven Security Adjustments.
¶ 5.3.3 Design Practice Activity 1
Recovery from Advanced Persistent Threat (APT).
.png)
¶ 5.3.4 Design Practice Activity 2
Designing a DDoS Recovery and Resilience Strategy for Internet Edge.
¶ 5.3.5 Design Practice Activity 3
Mitigating and Recovering from a Ransomware Outbreak.
¶ 5.3.6 Design Practice Activity 4
Incident Response Design for Insider-Driven Data Breach.
¶ 5.3.7 Summary.
Goto Part3 - DevSecOps Integration and Automated Security Pipelines