May 1, 2024
Updated May 27, 2025
20 minute read
An Introduction to Security Monitoring
Security monitoring is the continuous process of observing and analyzing an organization's IT environment to detect and respond to cybersecurity threats. It involves collecting and evaluating data from various sources within a network, such as system logs, network traffic, and application activities, to identify suspicious patterns or unauthorized system changes. The core idea is to gain real-time (or near real-time) visibility into the security posture of an organization, allowing for swift action when potential security incidents are identified. This proactive stance is crucial in today's digital landscape, where cyber threats are constantly evolving and becoming increasingly sophisticated.
smt27j|
Find a path to becoming a Security Monitoring. Learn more at:
OpenCourser.com/topic/smt27j/security
Reading list
We've selected 23 books
that we think will supplement your
learning. Use these to
develop background knowledge, enrich your coursework, and gain a
deeper understanding of the topics covered in
Security Monitoring.
Published recently, this book directly addresses the contemporary challenge of evasive malware. It provides a guide to detecting, analyzing, and defeating advanced threats that are designed to avoid traditional security monitoring. It is highly relevant for understanding current threats and advanced detection techniques.
Serves as an essential guide for aspiring NSM analysts. It takes a fundamental approach with real-world examples covering the collection, detection, and analysis stages of the NSM cycle. It is particularly useful for beginners seeking a practical understanding of NSM concepts and techniques.
Connects threat intelligence with incident response, a crucial aspect of modern security monitoring. It explains how to leverage intelligence to improve detection and response capabilities. It's relevant for understanding how monitoring feeds into a more proactive security posture.
This handbook condensed reference guide for cybersecurity incident responders and security professionals. It covers essential information on the incident response process, attacker methodologies, common tools, and analysis techniques. It's a valuable resource for quick reference and solidifying understanding of incident response within a monitoring context.
A practical guide for defensive security professionals, this book provides a toolkit of techniques and tools for securing and monitoring systems and networks. It offers hands-on knowledge that directly supports the implementation of effective security monitoring practices.
SIEM systems are central to modern security monitoring. focuses on the practical aspects of implementing and managing a SIEM, covering topics like data collection, correlation, and analysis. It's a valuable resource for understanding the technology that underpins many security monitoring operations.
Effective security monitoring heavily relies on logs. provides a deep dive into the critical aspects of logging and log management, which are foundational to detecting and investigating security incidents. It useful reference for anyone involved in building or managing a security monitoring infrastructure.
Focusing specifically on Windows environments, this book delves into the intricacies of Windows security auditing and event logging for monitoring purposes. It provides detailed scenarios and patterns for detecting malicious activity on Windows systems, which are prevalent in many organizations.
Provides a comprehensive overview of security monitoring and SIEM systems. It covers topics such as system architecture, log management, and incident response. It valuable resource for anyone who wants to learn more about security monitoring or SIEM systems.
Covers the use of AWS CloudWatch for security monitoring. It provides step-by-step instructions on how to set up and configure AWS CloudWatch for security monitoring. It also covers how to use AWS CloudWatch to detect and respond to security threats.
Offers a comprehensive overview of computer security principles and practices, including topics related to security monitoring such as intrusion detection and prevention. It's a widely used textbook in academic settings and provides a solid theoretical foundation.
Provides an overview of modern advancements in surveillance systems and technologies, which are increasingly relevant to security monitoring. It touches upon AI-driven monitoring, real-time data analysis, and other contemporary capabilities. While broader than just cybersecurity, it offers context on the technological evolution impacting monitoring.
Based on the experiences of Cisco security experts, this book provides a practical approach to security monitoring on enterprise networks. It outlines steps for developing monitoring policies, understanding network telemetry, and selecting event sources. While an older publication, it offers valuable foundational concepts and real-world examples.
Provides a basic overview of security monitoring. It covers topics such as log management, intrusion detection, and incident response. It good starting point for anyone who wants to learn more about security monitoring.
For more information about how these books relate to this course, visit:
OpenCourser.com/topic/smt27j/security
Save
