February 2026
Intermediate to advanced
358 pages
10h 19m
Spanish
Content preview from Manual del equipo azul: respuesta ante incidentes (Spanish Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 10. Capacidades de detección y respuestaempresarial
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
Una actualización del Manual del equipo azul: Respuesta a incidentes no estaría completa sin hablar de la detección y respuesta en los puntos finales (EDR). Para ello, me puse en contacto con Shane Harsch, un colega que trabaja para SentinelOne, y él me proporcionó comentarios y capturas de pantalla de la plataforma SentinelOne Singularity para este capítulo. En este capítulo se describe una secuencia de ataque de ejemplo basada en Scattered Spider. El objetivo es ilustrar cómo una solución de primera categoría aprovecha varios temas de IR presentados en BTHb, lo que te permite comprender el estado actual de la técnica.
Existen otras soluciones, y es posible que tengas una plataforma EDR premium. Se eligió SentinelOne Singularity porque es líder en el mercado, con una arquitectura altamente escalable, numerosas integraciones y un número significativo de motores analíticos basados en agentes que protegen al cliente sin conexión.
Flujo de ataque de muestra
En este capítulo se detalla un ataque basado en Scattered Spider de y cómo la solución procesa esa secuencia de eventos, genera alertas y ayuda al analista a comprender el ataque. Las alertas se muestran en la Figura 10-1. Los pasos del ataque son los siguientes:
-
El adversario obtiene acceso inicial a través de un correo electrónico de phishing. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.