★★★★★ 5
Solid book that gives you useful commands and some Blue Team essentials
Format: Paperback
If you're looking at this, you know why you're looking at it, so not going to explain.
It is good. 130 or so pages and most of it is commands that are useful for your run books. The book doesn't explain how to interpret the results, but if you can understand it and are comfortable on a shell, you can probably hazard a guess anyways, or Google it.
A small amount of the commands are a tiny bit dated, which is expected with a print manual giving you commands for applications/OSes that are always changing, but even if dated, they at least give you the idea of what to run. Just go look up a good replacement application, or check the --help file for updated syntax.
Really liked the IR checklist at the back, will incorporate some of that.
WAS THIS REVIEW HELPFUL?YesReportShare
Reviewed in the United States on January 1, 2023