Cyber Security All-in-One, Volume 3: Security Operations, Detection, and Incident Response

How modern security operations detect, hunt and respond to attacks.

Cyber Security All-in-One, Volume 3: Security Operations, Detection, and Incident Response is a professional reference by Professor Kai London. It covers SOC design, logging and telemetry, SIEM and SOAR, EDR, NDR and XDR, detection engineering, threat intelligence, MITRE ATT&CK, threat hunting, penetration testing, incident response, forensics and ransomware response.

Written for boards, executives, CISOs, engineers, risk and compliance leaders and practitioners who need clear, defensible guidance they can put to work, the book combines explanation with practical frameworks, checklists and decision aids.

Key topics include: SOC design, logging, telemetry, SIEM, SOAR, EDR, NDR, XDR, detection engineering, threat intelligence, MITRE ATT&CK, threat hunting, penetration testing, incident response, forensics.

Professor Kai London is a cybersecurity executive, security architect, author and professional researcher whose work spans enterprise security, operational technology, resilience, governance and international security. His books are written for boards, executives, practitioners and institutional readers.