SOC Analyst Career Track

About Course

Vendor-neutral preparation for a Security Operations Centre analyst role: SOC fundamentals, log management and SIEM basics, threat intelligence, and incident detection, triage and escalation.

About 30 hours.

Course Content

Module 1: SOC fundamentals

SOC roles, tiers and workflow
Security monitoring concepts
Common attack techniques, defender’s view

About Course

Course Content

Module 1: SOC fundamentals

SOC roles, tiers and workflow

Security monitoring concepts

Common attack techniques, defender’s view

Module 2: Log management and SIEM

Log sources and normalisation

SIEM concepts and correlation rules

Building basic detection use cases

Module 3: Threat intelligence and hunting

Threat intelligence sources and feeds

Indicators of compromise

Basic threat hunting techniques

Module 4: Incident detection and triage

Alert triage and false-positive reduction

Escalation procedures

Writing a clear incident ticket