Jeff T. Parker

Jessey Bullock

Master Wireshark to solve real-world security problems If you don’t already use Wireshark for a wide range of information security tasks, you will after this book. Mature and powerful, Wireshark is commonly used to find root cause of challenging network issues. This book extends that power to information security professionals, complete with a downloadable, virtual lab environment. Wireshark for Security Professionals covers both offensive and defensive concepts that can be applied to essentially any InfoSec role. Whether into network security, malware analysis, intrusion detection, or penetration testing, this book demonstrates Wireshark through relevant and useful examples. Master Wireshark through both lab scenarios and exercises. Early in the book, a virtual lab environment is provided for the purpose of getting hands-on experience with Wireshark. Wireshark is combined with two popular platforms: Kali, the security-focused Linux distribution, and the Metasploit Framework, the open-source framework for security testing. Lab-based virtual systems generate network traffic for analysis, investigation and demonstration. In addition to following along with the labs you will be challenged with end-of-chapter exercises to expand on covered material. Lastly, this book explores Wireshark with Lua, the light-weight programming language. Lua allows you to extend and customize Wireshark’s features for your needs as a security professional. Lua source code is available both in the book and online. Lua code and lab source code are available online through GitHub, which the book also introduces. The book’s final two chapters greatly draw on Lua and TShark, the command-line interface of Wireshark. By the end of the book you will gain the following: Master the basics of Wireshark Explore the virtual w4sp-lab environment that mimics a real-world network Gain experience using the Debian-based Kali OS among other systems Understand the technical details behind network attacks Execute exploitation and grasp offensive and defensive activities, exploring them through Wireshark Employ Lua to extend Wireshark features and create useful scripts To sum up, the book content, labs and online material, coupled with many referenced sources of PCAP traces, together present a dynamic and robust manual for information security professionals seeking to leverage Wireshark.

Using Wireshark and the Metasploit Framework

Wireshark for Security Professionals

Audrey O'Shea

Improve your understanding of all Core 1 and Core 2 A+ exam objectives and prepare for a new career as a computer technician The Third Edition of the CompTIA A+ Complete Practice Tests: Core 1 Exam 220-1101 and Core 2 Exam 220-1102 offers aspiring and practicing computer technicians essential and practical exam prep material for the industry favorite A+ certification. The hundreds of domain-by-domain practice questions cover all of the A+ exam objectives tested on the Core 1 and Core 2 exams, helping you prepare for success on the tests and in the real world. Just like the real exams, the practice questions contained within this resource cover mobile devices, networking, hardware, virtualization and cloud computing, hardware and network troubleshooting, operating systems, security, software troubleshooting, and operational procedures. These rigorous and realistic practice questions will get you ready for your first role as a computer technician and let you hit the ground running. This comprehensive set includes: Challenging questions designed to advance your understanding and comprehension of all covered exam domains Questions similar to those found on the real Core 1 and Core 2 A+ exams Access to the Sybex online test bank, with hundreds of questions and full-length practice exams Perfect for anyone prepping for the Core 1 and Core 2 A+ exams, CompTIA A+ Complete Practice Tests: Core 1 Exam 220-1101 and Core 2 Exam 220-1102 is also an ideal resource for aspiring and early-career computer technicians who want to improve their understanding of some of the foundational concepts they rely on each day in the field.

Core 1 Exam 220-1101 and Core 2 Exam 220-1102

CompTIA A+ Complete Practice Tests

Nadean H. Tanner

Prepare to succeed in your new cybersecurity career with the challenging and sought-after CASP+ credential In the newly updated Fourth Edition of CASP+ CompTIA Advanced Security Practitioner Study Guide Exam CAS-004, risk management and compliance expert Jeff Parker walks you through critical security topics and hands-on labs designed to prepare you for the new CompTIA Advanced Security Professional exam and a career in cybersecurity implementation. Content and chapter structure of this Fourth edition was developed and restructured to represent the CAS-004 Exam Objectives. From operations and architecture concepts, techniques and requirements to risk analysis, mobile and small-form factor device security, secure cloud integration, and cryptography, you’ll learn the cybersecurity technical skills you’ll need to succeed on the new CAS-004 exam, impress interviewers during your job search, and excel in your new career in cybersecurity implementation. This comprehensive book offers: Efficient preparation for a challenging and rewarding career in implementing specific solutions within cybersecurity policies and frameworks A robust grounding in the technical skills you’ll need to impress during cybersecurity interviews Content delivered through scenarios, a strong focus of the CAS-004 Exam Access to an interactive online test bank and study tools, including bonus practice exam questions, electronic flashcards, and a searchable glossary of key terms Perfect for anyone preparing for the CASP+ (CAS-004) exam and a new career in cybersecurity, CASP+ CompTIA Advanced Security Practitioner Study Guide Exam CAS-004 is also an ideal resource for current IT professionals wanting to promote their cybersecurity skills or prepare for a career transition into enterprise cybersecurity.

Exam CAS-004

CASP+ CompTIA Advanced Security Practitioner Study Guide

Michael Gregg

Comprehensive coverage of the new CASP+ exam, with hands-on practice and interactive study tools The CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition, offers invaluable preparation for exam CAS-003. Covering 100 percent of the exam objectives, this book provides expert walk-through of essential security concepts and processes to help you tackle this challenging exam with full confidence. Practical examples and real-world insights illustrate critical topics and show what essential practices look like on the ground, while detailed explanations of technical and business concepts give you the background you need to apply identify and implement appropriate security solutions. End-of-chapter reviews help solidify your understanding of each objective, and cutting-edge exam prep software features electronic flashcards, hands-on lab exercises, and hundreds of practice questions to help you test your knowledge in advance of the exam. The next few years will bring a 45-fold increase in digital data, and at least one third of that data will pass through the cloud. The level of risk to data everywhere is growing in parallel, and organizations are in need of qualified data security professionals; the CASP+ certification validates this in-demand skill set, and this book is your ideal resource for passing the exam. Master cryptography, controls, vulnerability analysis, and network security Identify risks and execute mitigation planning, strategies, and controls Analyze security trends and their impact on your organization Integrate business and technical components to achieve a secure enterprise architecture CASP+ meets the ISO 17024 standard, and is approved by U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is also compliant with government regulations under the Federal Information Security Management Act (FISMA). As such, this career-building credential makes you in demand in the marketplace and shows that you are qualified to address enterprise-level security concerns. The CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition, is the preparation resource you need to take the next big step for your career and pass with flying colors.

Exam CAS-003

Leverage Wireshark, Lua and Metasploit to solve any securitychallenge Wireshark is arguably one of the most versatile networking toolsavailable, allowing microscopic examination of almost any kind ofnetwork activity. This book is designed to help you quicklynavigate and leverage Wireshark effectively, with a primer forexploring the Wireshark Lua API as well as an introduction to theMetasploit Framework. Wireshark for Security Professionals covers bothoffensive and defensive concepts that can be applied to any Infosecposition, providing detailed, advanced content demonstrating thefull potential of the Wireshark tool. Coverage includes theWireshark Lua API, Networking and Metasploit fundamentals, plusimportant foundational security concepts explained in a practicalmanner. You are guided through full usage of Wireshark, frominstallation to everyday use, including how to surreptitiouslycapture packets using advanced MiTM techniques. Practicaldemonstrations integrate Metasploit and Wireshark demonstrating howthese tools can be used together, with detailed explanations andcases that illustrate the concepts at work. These concepts can beequally useful if you are performing offensive reverse engineeringor performing incident response and network forensics. Lua sourcecode is provided, and you can download virtual lab environments aswell as PCAPs allowing them to follow along and gain hands onexperience. The final chapter includes a practical case study thatexpands upon the topics presented to provide a cohesive example ofhow to leverage Wireshark in a real world scenario. Understand the basics of Wireshark and Metasploit within thesecurity space Integrate Lua scripting to extend Wireshark and perform packetanalysis Learn the technical details behind common networkexploitation Packet analysis in the context of both offensive and defensivesecurity research Wireshark is the standard network analysis tool used across manyindustries due to its powerful feature set and support for numerousprotocols. When used effectively, it becomes an invaluable tool forany security professional, however the learning curve can be steep.Climb the curve more quickly with the expert insight andcomprehensive coverage inWireshark for SecurityProfessionals.

Kevin Henry

Sean Murphy

David Seidl

Ben Malisow

John Warsinske

Mark Graff

Christopher Hoover

C. Paul Oakes

George Pajari

Mike Vasquez

The only official, comprehensive reference guide to the CISSP All new for 2019 and beyond, this is the authoritative common body of knowledge (CBK) from (ISC)2 for information security professionals charged with designing, engineering, implementing, and managing the overall information security program to protect organizations from increasingly sophisticated attacks. Vendor neutral and backed by (ISC)2, the CISSP credential meets the stringent requirements of ISO/IEC Standard 17024. This CBK covers the new eight domains of CISSP with the necessary depth to apply them to the daily practice of information security. Written by a team of subject matter experts, this comprehensive reference covers all of the more than 300 CISSP objectives and sub-objectives in a structured format with: Common and good practices for each objective Common vocabulary and definitions References to widely accepted computing standards Highlights of successful approaches through case studies Whether you've earned your CISSP credential or are looking for a valuable resource to help advance your security career, this comprehensive guide offers everything you need to apply the knowledge of the most recognized body of influence in information security.

The Official (ISC)2 Guide to the CISSP CBK Reference

Quentin Docter

Test your knowledge and know what to expect on A+ exam day CompTIA A+ Complete Practice Tests, Second Edition enables you to hone your test-taking skills, focus on challenging areas, and be thoroughly prepared to ace the exam and earn your A+ certification. This essential component of your overall study plan presents nine unique practice tests—and two 90-question bonus tests—covering 100% of the objective domains for both the 220-1001 and 220-1002 exams. Comprehensive coverage of every essential exam topic ensures that you will know what to expect on exam day and maximize your chances for success. Over 1200 practice questions on topics including hardware, networking, mobile devices, operating systems and procedures, troubleshooting, and more, lets you assess your performance and gain the confidence you need to pass the exam with flying colors. This second edition has been fully updated to reflect the latest best practices and updated exam objectives you will see on the big day. A+ certification is a crucial step in your IT career. Many businesses require this accreditation when hiring computer technicians or validating the skills of current employees. This collection of practice tests allows you to: Access the test bank in the Sybex interactive learning environment Understand the subject matter through clear and accurate answers and explanations of exam objectives Evaluate your exam knowledge and concentrate on problem areas Integrate practice tests with other Sybex review and study guides, including the CompTIA A+ Complete Study Guide and the CompTIA A+ Complete Deluxe Study Guide Practice tests are an effective way to increase comprehension, strengthen retention, and measure overall knowledge. The CompTIA A+ Complete Practice Tests, Second Edition is an indispensable part of any study plan for A+ certification.

Jeff T. Parker

Books

Your next favorite book is out there