SANS SEC450/MGT551 Links and Book List

Technical/Analysis/Threat Intel Books:
MITRE SOC Book - Top 10 Strategies of a World Class CSOC - http://sec450.com/top10
Blue Team Handbook - http://www.blueteamhandbook.com/
Intelligence Driven Threat Defense - http://sec450.com/intel
Crafting the Infosec Playbook - http://sec450.com/playbook
Psychology of Intelligence Analysis - https://www.cia.gov/static/9a5f1162fd0932c29bfed1c030edf4ae/Pyschology-of-Intelligence-Analysis.pdf

Management Books:
How to Measure Anything in Cybersecurity Risk - https://www.howtomeasureanything.com/cybersecurity/
The Goal - https://www.amazon.com/Goal-Process-Ongoing-Improvement/dp/0884271951
Statistical Process Control for Managers - https://www.amazon.com/Statistical-Process-Control-Managers-Victor/dp/1606498460
The 4 Disciplines of Execution - https://www.franklincovey.com/the-4-disciplines/
Measure What Matters - https://www.whatmatters.com/
The ONE Thing - https://the1thing.com/
Drive - The Surprising Truth about What Motivates Us - https://www.danpink.com/books/drive/

Open-Source SOC Tools:
TheHive - https://thehive-project.org/
MISP - https://misp-project.org/
Arkime - https://arkime.com/
Suricata - https://suricata.io/
Pi-Hole - https://pi-hole.net/
Elastic Stack - https://www.elastic.co/
Node Red Workflow Automation - https://nodered.org/

Other Videos / Tools Links:
MITRE ATT&CK - http://sec450.com/attack
ATT&CK Navigator - http://sec450.com/navigator
Rob Joyce (NSA TAO) Talk - http://sec450.com/tao
JPCERT Commands Abused by Attackers - http://sec450.com/jpcert

Other Guidance:
MS Priv. Access Management Guidance - http://aka.ms/privsec
PowerShell Logging Guidance - http://sec450.com/powershell