Further reading

• SANS Continuous Monitoring—What It Is, Why It Is Needed, and How to Use It: https://www.sans.org/reading-room/whitepapers/analyst/continuous-monitoring-is-needed-35030
• PCI DSS Part 11 - Regularly test security systems and processes: https://www.pcisecuritystandards.org/document_library?category=pcidss&document=pci_dss
• Guide to Computer Security Log Management (SP 800-92): https://ws680.nist.gov/publication/get_pdf.cfm?pub_id=50881
• NIST 800-137 Information Security Continuous Monitoring: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-137.pdf
• Loki - Simple IOC and Incident Response Scanner: https://github.com/Neo23x0/Loki
• Malware Indicators: https://github.com/citizenlab/malware-indicators
• OSINT Threat Feeds: https://www.circl.lu/doc/misp/feed-osint/
• SANS How to Use Threat Intelligence effectively: https://www.sans.org/reading-room...