September 2026
Intermediate
490 pages
16h 10m
French
Content preview from Guide de la « Blue Team » : SOC, SIEM et chasse aux menaces (French Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapitre 17. Gestiondes journaux
Cet ouvrage a été traduit à l'aide de l'IA. Tes réactions et tes commentaires sont les bienvenus : translation-feedback@oreilly.com
« Pour mettre en place un bon programme de surveillance de la sécurité, les journaux sont essentiels. Ils alimentent presque tout ce qu’on fait en matière de surveillance, de la corrélation des événements à l’audit. »
Lorna Hutcheson, SANS Internet Storm Center
Il y a plein de raisons de collecter des journaux. D’abord, leur valeur opérationnelle : ça permet aux administrateurs système de passer en revue l’activité pour vérifier que les services fonctionnent bien et de repérer les problèmes système. Ensuite, leur valeur en matière de sécurité, en tant que trace d’audit. Puis, le respect des normes de conformité ou des exigences légales et réglementaires. Et enfin, les rapports de conformité. Selon le point de vue, l’ordre de priorité de ces raisons peut varier.
Des journaux fiables et riches en informations sont le moteur des opérations du SOC, de la recherche de menaces, de l’ingénierie de détection et des programmes de surveillance continue. Pour que ces processus fonctionnent efficacement, des millions d’enregistrements d’événements individuels transitent par un pipeline complexe à plusieurs étapes avant d’atteindre le tableau de bord d’un analyste ou une plateforme d’analyse. Pour s’assurer que les journaux sont fiables et utiles, il est important de comprendre comment ils sont générés, traités et transformés ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.