Advanced Elastic
0%
Elastic: Query Languages
Search large datasets efficiently with advanced queries in Kibana.
0%
Elastic: Setting up a SOC Lab
Set up a SOC lab with Elasticsearch, Kibana, and Fleet Server.
0%
Elastic: Using Elastic Defend
Explore Elastic Defend telemetry and alerts to investigate endpoint activity.
0%
Elastic: Using Logstash
Learn how to collect, process, and transform data with Logstash.
0%
Slingshot
Can you retrace an attacker's steps after they enumerate and compromise a web server?
Topic Rewind Recap
Lock in what you learned with a recap. Earn points and keep your streak.
Learn about the main components of the Elastic Stack and see how to use it effectively, both from a security engineering and a log analysis point of view.
In this module, we will build an Elastic Stack from its components and use it for log collection, endpoint protection, and alerting. We would shift away from legacy ELK terminology and instead focus on modern features and best practices, including ECS, Elastic Agent, Elastic Defend, and more.
Need to know
Core SOC Solutions
Understanding security solutions is key for SOC analysts. This module covers SIEM, EDR and SOAR, the core security solutions used in a SOC.
SIEM Triage for SOC
Explore how SIEM solutions help detect early signs of attacks, investigate SOC alerts, and correlate logs to build an incident timeline.
What are modules?
A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).
