You're reading from Cybersecurity – Attack and Defense Strategies, 3rd edition Improve your security posture to mitigate risks and prevent attackers from infiltrating your system

Product type Paperback

Published in Sep 2022

Publisher Packt

ISBN-13 9781803248776

Length 570 pages

Edition 3rd Edition

Tools

Metasploit

Concepts

Cybersecurity

Authors (2):

Yuri Diogenes

Dr. Erdal Ozkaya

View More author details

Table of Contents (20) Chapters

Preface

1. Security Posture

2. Incident Response Process FREE CHAPTER

3. What is a Cyber Strategy?

4. Understanding the Cybersecurity Kill Chain

5. Reconnaissance

6. Compromising the System

7. Chasing a User’s Identity

8. Lateral Movement

9. Privilege Escalation

10. Security Policy

11. Network Security

12. Active Sensors

13. Threat Intelligence

14. Investigating an Incident

15. Recovery Process

16. Vulnerability Management

17. Log Analysis

18. Other Books You May Enjoy

19. Index

Web server logs

When reviewing web server logs, pay particular attention to the web servers that have web applications interacting with SQL databases.

On a Windows server hosting one site, the IIS web server log files are located at \WINDOWS\system32\LogFiles\W3SVC1 and they are .log files that can be opened using Notepad. You can also use Excel or Microsoft Log Parser to open this file and perform basic queries.

You can download Log Parser from When reviewing the IIS log, pay close attention to the cs-uri-query and sc-status fields. These fields will show details about the HTTP requests that were performed. If you use Log Parser, you can perform a query against the log file to quickly identify whether the system experienced a SQL injection attack. Here is an example:

logparser.exe -i:iisw3c -o:Datagrid -rtp:100 "select date, time, c-ip, cs- uri-stem, cs-uri-query, time-taken, sc-status from C:wwwlogsW3SVCXXXexTEST...

The rest of the chapter is locked

Tech Concepts

Programming languages

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (2)

Yuri Diogenes

Yuri Diogenes has been working at Microsoft since 2006, and currently he is a Principal PM Manager where he manages a Team of PMs for Microsoft CNAPP Solution, Defender for Cloud. Yuri is also a Professor at EC-Council University and Trine University. Yuri has a Master of Science in Cybersecurity Intelligence and Forensics Investigation from Utica College, and he is currently working on his PhD in Cybersecurity Leadership from Capitol Technology University. Yuri has published a total of 32 books, mostly covering information security and Microsoft technologies. Yuri also holds many industry certifications, such as CISSP, E|CND, E|CEH, E|CSA, E|CHFI, E|CTIA, CompTIA Security+, CySA+, Network+, CASP, and MITRE ATT&CK Cyber Threat Intelligence.

See other products by Yuri Diogenes

Dr. Erdal Ozkaya

Dr. Erdal Ozkaya is named among the Top 50 Technology Leaders by CIO Online & IDC. He is a Chief Cybersecurity Strategist and CISO at Xcitium (Comodo Cybersecurity), and a professor at Charles Sturt University. His expertise spans end-to-end IT solutions, management, communications, and innovation. He's a well-known public speaker, an award-winning technical expert, author, and creator of certifications (courseware and exams) for prestigious organizations such as Microsoft, EC Council, CertNexus, and other expert-level vendors with an esteemed list of credits to his name. He is working with an ardent passion for raising cyber awareness and leveraging new, innovative approaches.

See other products by Dr. Erdal Ozkaya