This course will show what a day in the life of a SOC analyst looks like, what they need to know, the challenges they face, and what you need to secure your first job in a SOC. 

Participants will learn live how to analyze a detection, what tools are used, and how to eliminate a threat. They will also learn about other roles in the blue team and their purpose within a company.

Why you should attend

Participants in this course will gain all the knowledge needed to work in a Security Operations Center, as well as a detailed perspective on what this involves.

What you will learn

• SOC – What it is and how it works
• Examples of blue team roles and their purpose
• EDR/XDR – What they are and how they work
• What is SIEM and what is used for
• Actions you can take in an environment to mitigate a threat
• How to tell the difference between a false positive detection and a true positive detection
• What detection signatures are and what to do if a signature generates many false positives
• Detection Methods (Heuristic-based detection, Signature-based detection, Behavioral detection, Network Detection & Sandbox detection)
• Tools used for analysis
• PowerShell & Bash command line usage(Windows & Linux)
• What is OSQuery and how to use it
• Networking Basics
• Types of malware
• Types of attacks
• What are Persistence, Privilege Escalation, and Lateral Movement
• Methods used by attackers to avoid EDR detection
• What you need to secure your first SOC job.