990-37产品经理:Which Security Events Do I Really Need to Worry About? 我真正需要担心哪些安全事件？

丰。。

于 2024-03-07 19:28:12 发布

阅读量856

点赞数 19

CC 4.0 BY-SA版权

分类专栏： 990 文章标签：产品经理压力测试 python github 数据库

本文链接：https://blog.csdn.net/CSDNXXCQ/article/details/136543602

本文探讨了如何识别真正需要关注的安全事件，如端口扫描可能预示后续攻击，以及如何通过网络杀戮链评估优先级。同时强调了减少误报、控制安全漏洞和执行有效事件响应的重要性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Which Security Events Do I Really Need to Worry About? 我真正需要担心哪些安全事件？

Which security events develop into the type of information security incident that requires my attention now? And… what do I do about it? To help categorize each incident type, align each one against the cyber kill chain to determine appropriate priority and incident response strategy. You can use this table as a start.
哪些安全事件发展成了我现在需要关注的信息安全事件？那我该怎么办呢为了帮助对每个事件类型进行分类，请根据网络杀戮链对每个事件进行调整，以确定适当的优先级和事件响应策略。您可以使用此表作为一个开始。

在这里插入图片描述
A Note About Port Scanning:
Even if you’re sure that an attacker is getting no useful information back from their scanning, if they seem to be doing a detailed and comprehensive scan of your external systems, it is reasonable to interpret this as intent to follow-up th