Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
CCNA Cyber Ops SECOPS - Certification Guide 210-255

You're reading from   CCNA Cyber Ops SECOPS - Certification Guide 210-255 Learn the skills to pass the 210-255 certification exam and become a competent SECOPS associate

Arrow left icon
Product type Paperback
Published in Jul 2019
Publisher Packt
ISBN-13 9781838559861
Length 352 pages
Edition 1st Edition
Tools
Arrow right icon
Author (1):
Arrow left icon
Andrew Chu Andrew Chu
Author Profile Icon Andrew Chu
Andrew Chu
Arrow right icon
View More author details
Toc

Table of Contents (24) Chapters Close

Preface 1. Section 1: Endpoint Threat Analysis and Forensics FREE CHAPTER
2. Classifying Threats 3. Operating System Families 4. Computer Forensics and Evidence Handling 5. Section 2: Intrusion Analysis
6. Identifying Rogue Data from a Dataset 7. Warning Signs from Network Data 8. Network Security Data Analysis 9. Section 3: Incident Response
10. Roles and Responsibilities During an Incident 11. Network and Server Profiling 12. Compliance Frameworks 13. Section 4: Data and Event Analysis
14. Data Normalization and Exploitation 15. Drawing Conclusions from the Data 16. Section 5: Incident Handling
17. The Cyber Kill Chain Model 18. Incident-Handling Activities 19. Section 6: Mock Exams
20. Mock Exam 1
21. Mock Exam 2
22. Assessments 23. Other Books You May Enjoy

Chapter 10: Data Normalization and Exploitation

  1. (3)
    strftime(%F %T, 1232467200)
    would format the time and date stamp as 2009-01-20 16:00:00. 1232467200 is the Unix time code for this time and date, but conversions are not required for the 210-255 exam. Notice how this is the same for all four options.
    %F is the formatting option that's used for dates in the RFC 8601 format, and presents time in UTC, which is equivalent to the GMT (+00.00) time zone. Using the %c option presents the date in the format that's used in the local system. %T is used to present 24-hour time in seconds.
  2. (2)
    The awk command can be used to read through a serial file line by line, separating fields. The default is to use whitespace between fields, but this can be changed, for example, to comma-separated values or other delimiters.
    The grep CLI command can be used to search through data using regular...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image