SOC L1 Alert Triage

Learn more about SOC alerts and build a systematic approach to efficiently triaging them.

SOC L1 Alert Reporting

Learn how to properly report, escalate, and communicate about high-risk SOC alerts.

SOC Workbooks and Lookups

Discover useful corporate resources to help you structure and simplify L1 alert triage.

SOC Metrics and Objectives

Explore key metrics driving SOC effectiveness and discover ways to improve them.

Lock in what you learned with a recap. Earn points and keep your streak.

Introduction to Phishing

NEW? START HERE! Learn how to use SOC Simulator by completing your first scenario. Close all True Po...

Explore the essential SOC analyst skills to help you triage, classify, and escalate alerts in real-world SOC environments.

This module is built around the central concept of any SOC team - security alerts. You will learn to triage and classify alerts, document findings, write reports, and follow proper escalation and communication procedures. These skills will help you build confidence for TryHackMe SOC-SIM and your first months in a real SOC team.

Next steps

Core SOC Solutions

Understanding security solutions is key for SOC analysts. This module covers SIEM, EDR and SOAR, the core security solutions used in a SOC.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

SOC Team Internals

SOC L1 Alert Triage

SOC L1 Alert Reporting

SOC Workbooks and Lookups

SOC Metrics and Objectives

Topic Rewind Recap

Introduction to Phishing