Security Tools

[DarkMaster]

Log Management/Security Information Event Management (SIEM)

• Arcsight
• IBM/Qradar
• Splunk
• Mcafee/Nitro
• ELK
• LogRythm

Intrusion Detection/Intrusion Prevention Systems

• Cisco
• TippingPoint
• CheckPoint
• Juniper
• SonicWALL

Incident Response

1. Preparation
2. Identification
3. Containment
4. Eradication
5. Recovery
6. Lessons Learned

Forensics

• Redline
• FTK
• EnCase
• HB Gary
• Volatility
• GRR

Vulnerability Management

• Rapid7 Nexpose
• Tenable Nessus
• Qualys
• Tripwire/nCircle
• Veracode
• WhiteHat

Data Loss Prevention

• Websense
• Symantec
• Microsoft
• Zscaler

Encryption

• Symantec/PGP
• MS Bitlocker
• Sophos
• McAfee
• Symmetric
• PKI
• Ciphers
• Digests
• Key Management

Endpoint Protection (EPP)

• AntiVirus
  • McAfee
  • Symantec
  • Kaspersky
  • Microsoft Intune
  • TrendMicro
  • Sophos

Endpoint Detection & Response (EDR)

• CarbonBlack
• Cisco AMP
• CrowdStrike
• Cylance
• MS ATP E5
• Tanium

Application Security

• ZAP
• Burp Suite
• AppScan
• Veracode
• WhiteHatSecurity

Web Filters

• Cisco
• Mcafee
• Websense
• BlueCoat
• Zscaler

Mail Filters

• Proofpoint
• Microsoft
• Barracuda
• Cisco

Network Access Control

• Cisco
• Forescout
• Pulse/Juniper
• Aruba

Wireless Intrusion Prevention/Detection Systems

• Cisco
• Aruba
• Airtight
• Airwatch
• Motorola

Web Application Firewalls

• Imperva
• Palo Alto
• Barracuda
• Trustwave
• Fortiweb

Penetration Testing

• Social Engineering
• Phishing
• Metasploit
• Canvas
• CoreImpact

Database Activity Monitoring

• Imperva