Become a Job-Ready SOC Analyst

Learning Outcomes

• Introduction to SOC Operations
  • SOC Models (In-house, MSSP), Roles, and Responsibilities
  • Understanding the Cyber Kill Chain
  • Key Performance Indicators (KPIs) in a SOC
• Network Security Monitoring
  • TCP/IP Analysis with Wireshark
  • Working with IDS/IPS (Suricata/Snort)
  • Analyzing Network Logs
• Log Management & SIEM
  • Log Sources, Parsing, and Normalization
  • Deep Dive into SIEM (Splunk/ELK Stack)
  • Writing Correlation Rules and Creating Alerts
• Threat Intelligence
  • Indicators of Compromise (IOCs)
  • Using Threat Intelligence Platforms (MISP)
  • Cyber Threat Intelligence Lifecycle
• Incident Response
  • The PICERL Framework
  • Creating and Using SOC Playbooks
  • Incident Triage and Prioritization
• Malware Analysis Fundamentals
  • Static Analysis of Malicious Files
  • Dynamic Analysis in a Sandbox (Cuckoo)
  • Interpreting Malware Behavior Reports
• Endpoint Security Monitoring
  • Understanding Endpoint Detection & Response (EDR)
  • Analyzing Host Logs (Windows, Linux)
  • Basic Host-Based Forensics
• Final SOC Simulation
  • Live Threat Hunting in a Simulated Network
  • Responding to a Multi-stage Attack
  • TCSA Certification Exam Preparation