Summary
An introductory guide to Blue Team operations focusing on network analysis, intrusion detection, and more, sponsored by Linode.
Highlights
Part 1: Network Analysis and Intrusion Detection
00:00
This section covers network traffic analysis with Wireshark, intrusion detection using Snort and Suricata, threat detection with Wazoo, and security event monitoring with Splunk. It aims to introduce key concepts of traffic analysis and security monitoring.
Part 2: Host-based Security and Digital Forensics
15:00
Expands on host-based intrusion detection with OSSEC, digital forensics and incident response including memory acquisition with Lime, memory forensics with Volatility, disk forensics with Autopsy, Docker image analysis with Trivy, and incident response with FireEye Redline.