Gift Cards for every stocking
Enjoy fast, free delivery, exclusive deals, and award-winning movies & TV shows.
$62.11 with 6 percent savings
List Price: $65.99
FREE delivery Monday, November 2
Or Prime members get FREE delivery Friday, October 30. Order within 13 hrs 24 mins. Join Prime
Only 10 left in stock (more on the way).
$$62.11 () Includes selected options. Includes initial monthly payment and selected options. Details
Price
Subtotal
$$62.11
Subtotal
Initial payment breakdown
Shipping cost, delivery date, and order total (including tax) shown at checkout.
Shipper / Seller
Amazon.com
Amazon.com
Shipper / Seller
Amazon.com
Returns
FREE 30-day refund/replacement
FREE 30-day refund/replacement
Quick refund
Usually issued within 24 hours. See exceptions
FREE return
At least one free return option available.
Convenient dropoff
At any of our 50,000 US locations.
See return policy
Gift options
Available at checkout
Available at checkout This item is a gift. Change
At checkout, you can add a custom message, a gift receipt for easy returns and have the item gift-wrapped
Payment
Secure transaction
Your transaction is secure
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
Added to

Sorry, there was a problem.

There was an error retrieving your Wish Lists. Please try again.

Sorry, there was a problem.

List unavailable.
Sponsored
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

  • Blue Team Handbook: Incident Response

Follow the author

Follow authors for new release and deal updates, plus improved recommendations. See updates from all followed authors in Your Books.
Something went wrong. Please try your request again later.

Blue Team Handbook: Incident Response

5.0 out of 5 stars (3)

90 days free of Amazon Music with purchase Terms
{"desktop_buybox_group_1":[{"displayPrice":"$62.11","priceAmount":62.11,"currencySymbol":"$","integerValue":"62","decimalSeparator":".","fractionalValue":"11","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"S7jaZKa8f64WAxwNygpcm%2B3VhMfi9x%2BsLXOB1oXJmVQ8J11tkrF76wTY3oS4eYcU4Qv9NjZjP03dC1JorAwWDJuM3rUn9yczem30kqmGFndWMJ5efVjY9fMNt7tHPOkFFx%2F0sgmjMtjUEsWMvVfHZg%3D%3D","locale":"en-US","buyingOptionType":"NEW","aapiBuyingOptionIndex":0}]}

Purchase options and add-ons

As cyberthreats grow and infrastructure evolves, organizations must prioritize effective, dynamic, and adaptable incident response. Following the success of the original edition, Blue Team Handbook: Incident Response has been updated to reflect today's evolving cybersecurity landscape. This trusted and widely used field guide for cybersecurity incident responders, SOC analysts, and defensive security professionals distills incident response essentials into a concise, field-ready format.

Author Don Murdoch draws on decades of real-world experience in incident response and cybersecurity operations to provide actionable guidance and sample workflows you can immediately apply in your own work. Whether you're investigating an alert, analyzing suspicious traffic, or strengthening your organization's IR capability, you'll find this field-tested edition an essential resource for hands-on practitioners.

  • Understand how modern adversaries operate and recognize common indicators of compromise in networks
  • Analyze network traffic with common tools to identify and investigate suspicious activity
  • Execute structured incident response procedures and follow a clear response plan
  • Conduct basic forensic analysis on both Windows and Linux systems
  • Use proven methodologies and tools to carry out effective, dynamic incident response
Sponsored

Customers also bought or read

Loading...

From the brand


From the Publisher

Blue Team Handbook: Incident Response

From the Preface

Who Should Read This Book

Incident response is a critical aspect of security operations and follows a well-structured process. Incident responders often find themselves needing key pieces of information or thought processes to safely move on to the next phase, all the while realizing that continued discovery can cause rescoping of the incident. Blue Team Handbook provides responders with immediately applicable techniques to handle security incidents today and is filled with life lessons learned from the field. Whether you are new to the field, work in a security operations center and want to move up to the next level, or are a seasoned pro, there is something here for you to up your game.

Navigating This Book

Chapter 1 provides several working definitions of incident response and then covers two aspects of how IR has changed to respond to today’s threat actors. Next, it presents several topics that help define some of the key thought processes for IR with time-based security: a discussion of how to leverage the MITRE ATT&CK framework and an outline of how adversaries operate today.

Chapter 2 presents the overall recipe for the IR process. The chapter offers a checklist for all the phases, from Preparation to Lessons Learned, to help you apply a structure and framework to your IR processes.

Chapter 3 covers a wide variety of skills and tactics that augment the entire IR process, ranging from roles to templates to the traffic light protocol for information sharing.

Chapter 4 provides an overview of adversary tactics, tools, and procedures, most of which can be encountered during an actual incident.

Chapters 5, 6, and 7 go over specific technical aspects of the IR process and examine various platforms. Chapter 5 covers Windows examination using a variety of command-line tools; Chapter 6 focuses on triage and collecting volatile data on Linux systems; and Chapter 7 discusses PowerShell.

Chapter 8 provides information on analyzing Active Directory.

Chapter 9 covers network examinations at the packet capture and traffic levels.

Chapter 10 discusses Endpoint Detection and Response capabilities.

The book also includes appendices with reference materials, including a list of common TCP and UDP ports.

Blue Team Handbook
Blue Team Handbook
Blue Team Handbook by Don Murdoch Incident Response SOC, SIEM, and Threat Hunting

Editorial Reviews

About the Author

Don Murdoch, GSE, MBA is a leading information security professional with over 20 years in cyber response and digital defense. His experience is in non profit, academic, and Fortune 500 settings. He has taught CISSP, Security Architecture, and intrusion analysis courses for the SANS Institute, and is both the NICCS Incident Response course lead and the ISSAP course lead for ExpandingSecurity.com. Don has numerous InfoSec IT certifications - CISSP, ISSAP, 33 SANS certifications, a GSE, is a chartered SABSA security architect, and also is certified as a TOGAF Enterprise Architect.

Product details

  • ASIN ‏ : ‎ B0FMNLPL8Q
  • Publisher ‏ : ‎ O'Reilly Media
  • Publication date ‏ : ‎ March 24, 2026
  • Edition ‏ : ‎ 1st
  • Language ‏ : ‎ English
  • Print length ‏ : ‎ 356 pages
  • ISBN-13 ‏ : ‎ 979-8341661264
  • Item Weight ‏ : ‎ 1.26 pounds
  • Dimensions ‏ : ‎ 7 x 2 x 9.19 inches
  • Best Sellers Rank: #680,129 in Books (See Top 100 in Books)
  • Customer Reviews:
    5.0 out of 5 stars (3)

About the author

Follow authors for new release and deal updates, plus improved recommendations. See updates from all followed authors in Your Books.
GSE #99, Don Murdoch
Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.

Blue Team Handbook: Incident Response Edition: Voted "One of the best Cyber Security books of all time (3/100)" - BookAuthority.org

LINK TO NEW BTHb:SOC, SIEM (Ver 1.02): https://www.amazon.com/dp/1091493898

Sponsored

Customer reviews

5 out of 5 stars
3 global ratings
Sponsored
Sign in to see customer reviews.