Cybersecurity (SOC) course

Overview

Equip yourself with the hands-on skills required to operate within an enterprise Security Operations Centre (SOC). Master security event monitoring, log ingestion and analysis, SIEM tooling, threat detection, triage methodologies, and structured incident response procedures.

Syllabus

1. Module 1

   SOC Fundamentals & Defensive Architecture

   SOC workflows, tier-1 triage procedures, the MITRE ATT&CK framework, and the Cyber Kill Chain model.

2. Module 2

   Log Architecture & SIEM Ingestion

   Syslog protocols, Windows Event logging, authentication audit logs, and configuring centralised SIEM ingestion pipelines.

3. Module 3

   Threat Detection & Query Engineering

   Writing search queries, building automated detection rules for brute force and privilege escalation, and filtering false positives.

4. Module 4

   Endpoint Detection & Host Forensics

   Endpoint Detection and Response (EDR) agents, process execution trees, persistence mechanisms, and host-level investigation.

5. Module 5

   Network Traffic Analysis & Perimeter Defense

   Packet inspection, DNS telemetry, identifying command-and-control (C2) traffic, and firewall log correlation.

6. Module 6

   Threat Intelligence & IoC Hunting

   Extracting Indicators of Compromise (IoCs), utilizing threat intelligence platforms, and proactive threat hunting methodologies.

7. Module 7

   Incident Handling, Containment & Reporting

   Live incident response playbooks, host isolation, evidence preservation, root-cause analysis, and executive incident reports.

8. Module 8

   Production Capstone Project

   Participate in a live SOC incident simulation: detect an active multi-stage cyber intrusion, contain the attack, and deliver a full incident response report.

Who it's for

Aspiring SOC analysts, junior cybersecurity specialists, network administrators, and IT support professionals transitioning into defensive cybersecurity roles.

Tools covered

Security Operations Workflows, SIEM Architecture & Ingestion, MITRE ATT&CK Framework, Threat Detection & Telemetry, Endpoint & Network Forensics, Threat Intelligence & Hunting, Incident Response & Playbooks, Production Capstone Project.