Books

Si alguna vez pensaste que la ciberseguridad debería ser más que ethical hacking y que ISO 27001, entonces este libro es para ti. Contiene sólo aquello que ha probado ser útil y práctico, incluyendo estudios de casos y ejemplos reales. Una guía de recuerdo para el CISO experimentado, pero también una breve introducción para el CISO principiante.

Your infrastructure isn't a place anymore, it's text in a repo. This book teaches security engineers to read, review, and audit Terraform like an auditor, not a builder, so you know exactly what to look for before someone else's code hits production.

The premise of this book is to provide students a hands-on, go-to resource for building a secure, customizable lab environment in order to enable their own specific pursuits.

Threat → Control → Requirement → Verification. The field manual to read before you ship an autonomous agent.

Hello! I'm Tony Robinson, a threat researcher and Suricata rule writer on the Proofpoint Emerging Threats team. I write rules for the ETOPEN and ETPRO rulesets. My book originally started as a guide to get budding security analysts interested in Network Threat Detection with Suricata, and over time has evolved to include helpful guidance into threat research! After all, what good is being able to write Suricata rules if you can't find the threats you want to detect in the first place?

Hello! I'm Tony Robinson, a threat researcher and Suricata rule writer on the Proofpoint Emerging Threats team. I write rules for the ETOPEN and ETPRO rulesets. My book originally started as a guide to get budding security analysts interested in Network Threat Detection with Suricata, and over time has evolved to include helpful guidance into threat research! After all, what good is being able to write Suricata rules if you can't find the threats you want to detect in the first place?

Learn Bash the way it should be taught: by building one real, tested backup tool — not toy examples — one Git commit at a time.

USE THE COMMUNITY EDITION TO GET WHOLE BOOK FOR FREE !!The internet is a battleground, and every system has a weakness—you just have to find it. This isn’t a kiddie hacker’s guide; it’s a war manual for those ready to break, exploit, and outsmart the system. By the time you’re done, you won’t just know how hackers operate—you’ll become one.

Learn about binary instrumentation using the Frida toolkit using practical examples. This book is not deeply focused in theory but practical use cases instead, from basic uses of the API to how to apply it in real-world scenarios. We will apply instrumentation under Linux, Windows and MacOS systems.

Much of API security boils down to how you handle identity. In Identity and APIs, we discover the techniques to secure platform access and delegate access throughout a mature API ecosystem.

Threat Hunting starts with a question, not an alert.You do not need to already be a Threat Hunter to start thinking like one.CYBER HUNTER Project is a practical guide designed both for people taking their first steps into Threat Hunting and for cybersecurity professionals who want to sharpen the way they hunt, investigate and build detections.The book starts with the foundations: what Threat Hunting really is, how a hunter thinks, how to build a hypothesis, what evidence to look for, and how Threat Hunting differs from Threat Detection. From there, it moves progressively into real hunting investigations, showing how those ideas work against actual security telemetry.If you are starting from zero, CYBER HUNTER Project gives you a structured path into the field without assuming that you already know how to hunt.If you already work in a SOC, Incident Response, Detection Engineering, Threat Intelligence or Cybersecurity, it gives you new hunting ideas, investigation techniques and practical examples that you can adapt to your own environment.And if you are already a Threat Hunter, the goal is to help you go further: challenge assumptions, build stronger hypotheses, correlate evidence differently, discover new hunting opportunities and turn successful investigations into reusable detections.Across Email, Endpoints, Networks, Threat Intelligence, Identity, Software and Cloud Applications, CYBER HUNTER Project takes you through practical scenarios involving phishing, ransomware behaviour, suspicious authentication, network activity, threat intelligence feeds, cloud collaboration, device code authentication and many other hunting opportunities.Inside of the book, you will find:• Threat Hunting fundamentals explained from the ground up • A practical approach to building Hunt Hypotheses • Real, self-contained Threat Hunting investigations • Evidence-driven investigation strategies • Detection Opportunities derived from successful hunts • Detection Libraries with additional hunting ideas • Companion KQL queries for Microsoft Defender XDR and Microsoft Sentinel • MITRE ATT&CK mappings and reference material • Practical Threat Intelligence and IOC/IOA analysis • Ideas you can adapt to build your own huntsThe companion queries use KQL and Microsoft security telemetry, but the hunting methodology is intentionally vendor-neutral. The objective is not to memorize queries. It is to understand why a hunt works, what evidence makes it valuable, and how to reproduce that thinking on your own platform.Start with the fundamentals. Learn through real hunts. Build your own hypotheses. Improve the way you investigate.Whether this is your first Threat Hunting book or you already hunt threats every day, this project is designed to become a practical reference you can keep beside you and return to whenever you need your next hunting idea.The logic is the point, not the dialect.

AI agents introduce new security risks that traditional approaches often fail to address. This handbook shows you how to identify threats, build effective sandboxes and enforce least-privilege access. With practical examples and production-ready implementations, it gives you the tools to build AI systems that are secure by design.

Quantum computing is changing the rules of digital security. The cryptographic systems we rely on today may not remain secure for much longer. This book explores the algorithms, real-world challenges and migration strategies shaping the future of post-quantum cryptography, giving professionals the knowledge they need to prepare for what comes next.

Kod generowany przez AI kompiluje się, przechodzi testy i wygląda na gotowy. Błędy, które się liczą, kryją się w tym, czego brakuje. Praktyczna metoda przeglądu przed wdrożeniem.