You're reading from Cisco Certified CyberOps Associate 200-201 Certification Guide Learn blue teaming strategies and incident response techniques to mitigate cybersecurity incidents

Product type Paperback

Published in Jun 2021

Publisher Packt

ISBN-13 9781800560871

Length 660 pages

Edition 1st Edition

Tools

Cisco

Concepts

Cybersecurity

Author (1):

Glen D. Singh

View More author details

Table of Contents (25) Chapters

Preface

1. Section 1: Network and Security Concepts

2. Chapter 1: Exploring Networking Concepts FREE CHAPTER

3. Chapter 2: Exploring Network Components and Security Systems

4. Chapter 3: Discovering Security Concepts

5. Section 2: Principles of Security Monitoring

6. Chapter 4: Understanding Security Principles

7. Chapter 5: Identifying Attack Methods

8. Chapter 6: Working with Cryptography and PKI

9. Section 3: Host and Network-Based Analysis

10. Chapter 7: Delving into Endpoint Threat Analysis

11. Chapter 8: Interpreting Endpoint Security

12. Chapter 9: Exploring Computer Forensics

13. Chapter 10: Performing Intrusion Analysis

14. Section 4: Security Policies and Procedures

15. Chapter 11: Security Management Techniques

16. Chapter 12: Dealing with Incident Response

17. Chapter 13: Implementing Incident Handling

18. Chapter 14: Implementing Cisco Security Solutions

19. Chapter 15: Working with Cisco Security Solutions

20. Chapter 16: Real-World Implementation and Best Practices

21. Chapter 17: Mock Exam 1

22. Chapter 18: Mock Exam 2

23. Assessment

24. Other Books You May Enjoy

Contrasting tampered and untampered disk images

As a cybersecurity professional, you may be given the task of capturing an image of a disk in a forensic manner. Imagine a security incident has occurred on a system and you are required to perform some forensic investigation to determine who and what caused the attack. Additionally, you want to ensure the data that was captured is not tampered with or modified during the creation of a disk image process.

In this section, you will learn how to use various tools on both Microsoft Windows and the Linux operating system to capture a disk image of a local drive and determine whether the image was tampered with or not.

Lab – capturing a disk image on Linux

For this lab exercise, we'll be using the dd tool that is already built into the Linux operating system. In this lab exercise, you will learn how to create a disk image from one drive to another and verify whether the image is the same before and after creating the...