COURSE

Identifying Web Attacks Through Logs

Course

Log analysis involves reviewing and evaluating system activities to help mitigate risks. If you’re training to be a SOC Analyst, then you’ll need log analysis training. This course will review web application infrastructure, web servers, and logs. You will explore attack scenarios and identify the attack through logs generated by the web server.
Full access included with 
Insider Pro
 and 
Teams

2

H

6

M
Time

beginner

i
Designed for learners who have no prior work experience in IT or Cybersecurity, but are interested in starting a career in this exciting field.
Designed for learners with prior cybersecurity work experience who are interested in advancing their career or expanding their skillset.
Designed for learners with a solid grasp of foundational IT and cybersecurity concepts who are interested in pursuing an entry-level security role.
Experience Level

3

i

Earn qualifying credits for certification renewal with completion certificates provided for submission.
CEU's

Enrollees

Learners at 96% of Fortune 1000 companies trust Cybrary

About this course

Read More

Skills you'll gain

Course Outline

1
Introduction and Review
0
H
52
Min
1
Identifying Web Attacks Through Logs
1
H
14
Min

Course Introduction

Free

4m

Web Application Attacks Review

Free

10m

Web Applications Architecture Review Part 1

Free

9m

Vulnerability Scans

Free

9m

Web Applications Architecture Review Part 2

Free

8m

Brute Force Attacks

Free

7m

Web Server Logs Review Part 1

Free

7m

SQL Injection

Free

9m

Web Server Logs Review Part 2

Free

7m

File Inclusion

Free

7m

Tips and Common Issues Part 1

Free

8m

Tips and Common Issues Part 2

Free

9m

Other Log Sources Part 1

Free

9m

Other Log Sources Part 2

Free

7m

Course Summary

Free

4m

Course Introduction

4m

Introduction and Review
Web Application Attacks Review

10m

Identifying Web Attacks Through Logs
Vulnerability Scans

9m

Identifying Web Attacks Through Logs
Brute Force Attacks

7m

Identifying Web Attacks Through Logs
Web Server Logs Review Part 1

7m

Introduction and Review
SQL Injection

9m

Identifying Web Attacks Through Logs
Web Server Logs Review Part 2

7m

Introduction and Review
File Inclusion

7m

Identifying Web Attacks Through Logs
Tips and Common Issues Part 1

8m

Introduction and Review
Tips and Common Issues Part 2

9m

Introduction and Review
Other Log Sources Part 1

9m

Identifying Web Attacks Through Logs
Other Log Sources Part 2

7m

Identifying Web Attacks Through Logs
Course Summary

4m

Identifying Web Attacks Through Logs
Course Description

An Akamai Report from 2018 described SQLi (SQL Injection), LFI (Local File Injection) and XSS (Cross-Site Scripting) as the most common web attacks. (https://blogs.akamai.com/2018/06/summer-soti---web-attacks.html)

There are multiple types of web attacks. This course will review these attacks and teach you how to use the web application logs to identify them. To do this, the student will need to learn how to read a log and how to extract some of the key information from the log.

Subsequently, this first analysis of real world web server log examples will be used to get a better understanding of the attack. We will also use some scripts to find the information faster.

Following the log analysis of the web attacks, students will learn about some of the networks that can affect the web application like DDOS (Distributed Denial of Service) and other types of flooding. Upon completion of the course, the student should be able to read a web application log thatoriginated from the web server and identify some of the most common web attacks.

Prerequisites:

  • Basic Computer Network knowledge
  • - OSI and TCP/IP Model
  • Basic knowledge in common application and technology
  • - Firewalls,DNS,IPS/IDS - HTTP/HTTPS

    Course Goals

    By the end of this course, students should be able to:

  • Identify key information on web server logs
  • Identify malicious actions by analyzing logs
  • Identify web attacks after analyzing logs
  • In the Log Analysis training course, students will participate in a lab where they will learn to review different log files related to the Windows operating system. Students will learn to configure systems to log events, as well as to analyze system events.

    What is Log Analysis?

    All networks, computers, and other IT systems generate a record of system activities. The document that shows those activities is called an audit trail record or log. Log analysis is the process of reviewing and evaluating the records of system activities to help organizations mitigate certain risks and stay in compliance with regulations.

    How Does Log Analysis Work?

    Logs are typically created by operating systems, network devices, applications, and smart devices. They consist of several messages that are arranged chronologically and then stored in a file, on a disk, or in an application. Once the log information is collected, it can be analyzed to identify patterns and anomalies, like network intrusions. Log analysis components work together to identify the root causes for the anomalies or other unstructured data. Regular log analysis helps reduce and avoid various risks that are associated with the enterprise. The analysis provides evidence of what happened, the factors that determined the cause, and the impact of what occurred. This allows IT professionals to build countermeasures and models to mitigate risks.

    Log analysis is usually performed due to security or audit compliance, security incident responses, forensics, or system troubleshooting.

    Why is Log Analysis Important?

    There are many reasons that log analysis is important. It can serve various different purposes including:

    * Maintaining compliance with internal cybersecurity policies and external regulations and audits * To understand and mitigate data breaches and other types of security incidents * To understand user behavior * To conduct forensics for investigations * To troubleshoot computers, systems, or networks

    For some types of organizations, conduction of log analysis is mandatory if they are to be certified as compliant with certain regulations. However, log analysis can be very useful to all types of organizations as it saves time when attempting to diagnose a problem, resolve an issue, or manage infrastructure or applications.

    What is Involved in This Log Analysis Training Course?

    In this log analysis training, students will gain a foundational understanding of log analysis. They will be introduced to the tools that are needed to help identify network intrusion. The students will participate in lab activities that cover processing logs with the Windows operating system and applying learned analytical skills to configure systems to log events, as well as to analyze system events.

    The course will explain log analysis methodology, how to evaluate and analyze log files, how to extract information from the log files, and how to arrange log file data.

    Upon completion of the course, students will receive a Certificate of Completion.

    If you are interested in learning more about log analysis, our Log Analysis training course including lab activities is a great place to start. It’s easy to enroll, just click on the Register button in the top right corner of this screen to begin.

    Train Your Team

    Cybrary’s expert-led cybersecurity courses help your team remediate skill gaps and get up-to-date on certifications. Utilize Cybrary to stay ahead of emerging threats and provide team members with clarity on how to learn, grow, and advance their careers within your organization.

    Included in a Path

    Instructors

    Igor Vieira
    Information Security Analyst
    Read Full Bio
    Jacob Pelzman
    Read Full Bio
    Learn

    Learn core concepts and get hands-on with key skills.

    Practice

    Exercise your problem-solving and creative thinking skills with security-centric puzzles

    Prove

    Assess your knowledge and skills to identify areas for improvement and measure your growth

    Get Hands-on Learning

    Put your skills to the test in virtual labs, challenges, and simulated environments.

    Measure Your Progress

    Track your skills development from lesson to lesson using the Cybrary Skills Tracker.

    Connect with the Community

    Connect with peers and mentors through our supportive community of cybersecurity professionals.

    Success from Our Learners

    "Cybrary really helped me get up to speed and acquire a baseline level of technical knowledge. It offers a far more comprehensive approach than just learning from a book. It actually shows you how to apply cybersecurity processes in a hands-on way"

    Don Gates

    Principal Systems Engineer/SAIC

    "Cybrary’s SOC Analyst career path was the difference maker, and was instrumental in me landing my new job. I was able to show the employer that I had the right knowledge and the hands-on skills to execute the role."

    Cory

    Cybersecurity analyst/

    "I was able to earn my CISSP certification within 60 days of signing up for Cybrary Insider Pro and got hired as a Security Analyst conducting security assessments and penetration testing within 120 days. This certainly wouldn’t have been possible without the support of the Cybrary mentor community."

    Mike

    Security Engineer and Pentester/

    "Cybrary really helped me get up to speed and acquire a baseline level of technical knowledge. It offers a far more comprehensive approach than just learning from a book. It actually shows you how to apply cybersecurity processes in a hands-on way"

    Don Gates

    Principal Systems Engineer/SAIC

    "Cybrary’s SOC Analyst career path was the difference maker, and was instrumental in me landing my new job. I was able to show the employer that I had the right knowledge and the hands-on skills to execute the role."

    Cory

    Cybersecurity analyst/

    "I was able to earn my CISSP certification within 60 days of signing up for Cybrary Insider Pro and got hired as a Security Analyst conducting security assessments and penetration testing within 120 days. This certainly wouldn’t have been possible without the support of the Cybrary mentor community."

    Mike

    Security Engineer and Pentester/

    "Becoming a Cybrary Insider Pro was a total game changer. Cybrary was instrumental in helping me break into cybersecurity, despite having no prior IT experience or security-related degree. Their career paths gave me clear direction, the instructors had real-world experience, and the virtual labs let me gain hands-on skills I could confidently put on my resume and speak to in interviews."

    Cassandra

    Information Security Analyst/Cisco Systems

    "I was able to earn both my Security+ and CySA+ in two months. I give all the credit to Cybrary. I’m also proud to announce I recently accepted a job as a Cyber Systems Engineer at BDO... I always try to debunk the idea that you can't get a job without experience or a degree."

    Casey

    Cyber Systems Engineer/BDO

    "Cybrary has helped me improve my hands-on skills and pass my toughest certification exams, enabling me to achieve 13 advanced certifications and successfully launch my own business. I love the practice tests for certification exams, especially, and appreciate the wide-ranging training options that let me find the best fit for my goals"

    Angel

    Founder,/ IntellChromatics.

    Identifying Web Attacks Through Logs

    Log analysis involves reviewing and evaluating system activities to help mitigate risks. If you’re training to be a SOC Analyst, then you’ll need log analysis training. This course will review web application infrastructure, web servers, and logs. You will explore attack scenarios and identify the attack through logs generated by the web server.
    2
    6
    M
    Time
    beginner
    difficulty
    3
    ceu/cpe

    Course Content

    Course Description

    An Akamai Report from 2018 described SQLi (SQL Injection), LFI (Local File Injection) and XSS (Cross-Site Scripting) as the most common web attacks. (https://blogs.akamai.com/2018/06/summer-soti---web-attacks.html)

    There are multiple types of web attacks. This course will review these attacks and teach you how to use the web application logs to identify them. To do this, the student will need to learn how to read a log and how to extract some of the key information from the log.

    Subsequently, this first analysis of real world web server log examples will be used to get a better understanding of the attack. We will also use some scripts to find the information faster.

    Following the log analysis of the web attacks, students will learn about some of the networks that can affect the web application like DDOS (Distributed Denial of Service) and other types of flooding. Upon completion of the course, the student should be able to read a web application log thatoriginated from the web server and identify some of the most common web attacks.

    Prerequisites:

  • Basic Computer Network knowledge
  • - OSI and TCP/IP Model
  • Basic knowledge in common application and technology
  • - Firewalls,DNS,IPS/IDS - HTTP/HTTPS

    Course Goals

    By the end of this course, students should be able to:

  • Identify key information on web server logs
  • Identify malicious actions by analyzing logs
  • Identify web attacks after analyzing logs
  • In the Log Analysis training course, students will participate in a lab where they will learn to review different log files related to the Windows operating system. Students will learn to configure systems to log events, as well as to analyze system events.

    What is Log Analysis?

    All networks, computers, and other IT systems generate a record of system activities. The document that shows those activities is called an audit trail record or log. Log analysis is the process of reviewing and evaluating the records of system activities to help organizations mitigate certain risks and stay in compliance with regulations.

    How Does Log Analysis Work?

    Logs are typically created by operating systems, network devices, applications, and smart devices. They consist of several messages that are arranged chronologically and then stored in a file, on a disk, or in an application. Once the log information is collected, it can be analyzed to identify patterns and anomalies, like network intrusions. Log analysis components work together to identify the root causes for the anomalies or other unstructured data. Regular log analysis helps reduce and avoid various risks that are associated with the enterprise. The analysis provides evidence of what happened, the factors that determined the cause, and the impact of what occurred. This allows IT professionals to build countermeasures and models to mitigate risks.

    Log analysis is usually performed due to security or audit compliance, security incident responses, forensics, or system troubleshooting.

    Why is Log Analysis Important?

    There are many reasons that log analysis is important. It can serve various different purposes including:

    * Maintaining compliance with internal cybersecurity policies and external regulations and audits * To understand and mitigate data breaches and other types of security incidents * To understand user behavior * To conduct forensics for investigations * To troubleshoot computers, systems, or networks

    For some types of organizations, conduction of log analysis is mandatory if they are to be certified as compliant with certain regulations. However, log analysis can be very useful to all types of organizations as it saves time when attempting to diagnose a problem, resolve an issue, or manage infrastructure or applications.

    What is Involved in This Log Analysis Training Course?

    In this log analysis training, students will gain a foundational understanding of log analysis. They will be introduced to the tools that are needed to help identify network intrusion. The students will participate in lab activities that cover processing logs with the Windows operating system and applying learned analytical skills to configure systems to log events, as well as to analyze system events.

    The course will explain log analysis methodology, how to evaluate and analyze log files, how to extract information from the log files, and how to arrange log file data.

    Upon completion of the course, students will receive a Certificate of Completion.

    If you are interested in learning more about log analysis, our Log Analysis training course including lab activities is a great place to start. It’s easy to enroll, just click on the Register button in the top right corner of this screen to begin.

    This course is part of a Career Path:
    No items found.

    Instructed by

    Provider
    Cybrary Logo
    Certification Body
    Certificate of Completion

    Complete this entire course to earn a Identifying Web Attacks Through Logs Certificate of Completion