Blue Team Field Manual (BTFM)
'Blue Team Field Manual' is a practical operational guide dedicated to Security Operations Center (SOC) workflows, SIEM engineering, and defensive threat hunting. Focusing on the methodologies needed to detect, analyze, and remediate enterprise intrusions, this text provides actionable blueprints for cyber defense.
The book explores log ingestion, Splunk search processing language (SPL), alert correlation rule development, incident triage, memory and endpoint analysis, threat intelligence integration, and MITRE ATT&CK alignment. Real-world scenario drills and interview preparation questions prepare readers for operational SOC roles.
A must-read for SOC analysts, SIEM administrators, threat hunters, and IT security engineers working in modern enterprise defense centers.
The book explores log ingestion, Splunk search processing language (SPL), alert correlation rule development, incident triage, memory and endpoint analysis, threat intelligence integration, and MITRE ATT&CK alignment. Real-world scenario drills and interview preparation questions prepare readers for operational SOC roles.
A must-read for SOC analysts, SIEM administrators, threat hunters, and IT security engineers working in modern enterprise defense centers.
Contents at a Glance
Chapter 1: Introduction to Blue Team Field Manual
Chapter 2: Core Architectural Concepts and Fundamental Principles
Chapter 3: Setting Up the Environment, Tooling, and Configuration
Chapter 4: Practical Methodologies and Step-by-Step Implementation
Chapter 5: Advanced Techniques, Performance, and Optimization
Chapter 6: Common Troubleshooting, Pitfalls, and Best Practices
Chapter 7: Security Considerations, Auditing, and Verification
Chapter 8: Real-World Case Studies, Projects, and Future Horizons
Index & Further Reading
Chapter 1: Introduction to Blue Team Field Manual
Chapter 2: Core Architectural Concepts and Fundamental Principles
Chapter 3: Setting Up the Environment, Tooling, and Configuration
Chapter 4: Practical Methodologies and Step-by-Step Implementation
Chapter 5: Advanced Techniques, Performance, and Optimization
Chapter 6: Common Troubleshooting, Pitfalls, and Best Practices
Chapter 7: Security Considerations, Auditing, and Verification
Chapter 8: Real-World Case Studies, Projects, and Future Horizons
Index & Further Reading
