Reference no: EM133566628

Case Study: SOC features include advanced analytics. This strategy uses high-level methodologies and tools to forecast future trends, events, and behaviors. This enables the SOC analyst to run complex statistical models, such as 'what-if' calculations, and to forecast many elements of the company's security operations.By default, Wireshark's TCP dissector monitors the state of each TCP session and alerts you when issues or potential problems are discovered. Whenever a capture file is initially opened, each TCP packet is analyzed once. Packets are processed in the order they are listed in the packet list. The "Analyze TCP sequence numbers" TCP dissector choice allows you to enable or disable this capability.To execute TCP analysis within your SOC-in-a-box architecture, use Kali Linux Wireshark. Assume this is an examination of the corporation you choose from the list of "Company Profiles."

Company info

Canyon Aeronautics designs airplanes and spacecraft in partnership with the US military for space exploration projects.

Tasks:

• Evaluate the potential threats, vulnerabilities, as well as risks uncovered throughout the analysis.
• Describe the exact mitigation strategy for each threat, vulnerability, and risk identified.
• Describe the significance of SOC analyst communication during advanced data analysis, and describe how each level of SOC analysts may study the process of doing advanced data analysis utilizing different security policy frameworks.