February 2026
Intermediate to advanced
358 pages
10h 19m
Spanish
Content preview from Manual del equipo azul: respuesta ante incidentes (Spanish Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 9. Análisisbasado en la red
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
Si hay una verdad en la respuesta a incidentes, es que la red no puede mentir. Porque si lo hiciera, la red no funcionaría realmente.
Don
El análisis basado en la red se centra en descubrir pruebas y patrones en las comunicaciones de red que revelen posibles incidentes de seguridad o intrusiones. Al examinar los flujos de tráfico, los protocolos y el movimiento de datos, los analistas pueden rastrear el comportamiento de los atacantes, identificar los sistemas comprometidos y validar las alertas con artefactos de red concretos .
La base de este proceso comienza con la captura de paquetes, donde los datos de red sin procesar proporcionan la visión más clara de lo que realmente ocurrió dentro del entorno.
Captura de datos de paquetes
Los datos de captura de paquetes, o PCAP (), son los datos reales copiados de la red cuando dos o más sistemas se comunican. La captura de datos PCAP durante el proceso de respuesta a incidentes proporciona pruebas irrefutables y detalladas de la actividad de la red entre uno o más sistemas. Los datos PCAP ofrecen ventajas distintivas sobre otras fuentes de datos en un incidente: muestran el volumen y el ritmo de las comunicaciones de red, pueden validar algunas alertas de seguridad, proporcionan una fuente de datos forenses y mejoran tu postura de seguridad general.
Los métodos para capturar ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.