Learning path

SOC Level 1 (Legacy)

This path is now considered legacy and will soon be replaced by a new path. The refreshed path is a major upgrade and includes a deeper dive into endpoint and network threats, better explains security operations and SIEM triage, and omits some forensic topics rarely observed in SOC routines.

Modules

8

Hands-on labs

71

Difficulty level

easy

Path SOC Level 1 (Legacy)

This path has been replaced by the new “SOC Level 1” learning path and will be retired. We recommend you enroll in the new path.

Example learning path completion certificate

Complete this learning path and earn a certificate of completion.

Introduction

This path is now legacy and will be retired. It has been replaced by the new modern “SOC Level 1” learning path. The new path is a major upgrade and includes a deeper dive into endpoint and network threats, better explains security operations and SIEM triage, and omits some forensic topics rarely observed in SOC routines. We encourage you to switch to the updated version for the best learning experience.

Section 1

Cyber Defence Frameworks (legacy)

Room Junior Security Analyst Intro

Junior Security Analyst Intro

Room Pyramid Of Pain

Pyramid Of Pain

Room Cyber Kill Chain

Cyber Kill Chain

Room Unified Kill Chain

Unified Kill Chain

Room Diamond Model

Room MITRE

Room Summit

Room Eviction

Topic Rewind Recap

Section 2

Cyber Threat Intelligence

Room Intro to Cyber Threat Intel

Intro to Cyber Threat Intel

Room Threat Intelligence Tools

Threat Intelligence Tools

Room Yara

Room OpenCTI

Room MISP

Room Friday Overtime

Friday Overtime

Room Trooper

Topic Rewind Recap

Section 3

Network Security and Traffic Analysis

Room Traffic Analysis Essentials

Traffic Analysis Essentials

Room Snort

Room Snort Challenge - The Basics

Snort Challenge - The Basics

Room Snort Challenge - Live Attacks

Snort Challenge - Live Attacks

Room NetworkMiner

Room Zeek

Room Zeek Exercises

Room Brim

Room Wireshark: The Basics

Wireshark: The Basics

Room Wireshark: Packet Operations

Wireshark: Packet Operations

Room Wireshark: Traffic Analysis

Wireshark: Traffic Analysis

Room TShark: The Basics

TShark: The Basics

Room TShark: CLI Wireshark Features

TShark: CLI Wireshark Features

Room TShark Challenge I: Teamwork

TShark Challenge I: Teamwork

Room TShark Challenge II: Directory

TShark Challenge II: Directory

Topic Rewind Recap

Section 4

Endpoint Security Monitoring

Room Intro to Endpoint Security

Intro to Endpoint Security

Room Core Windows Processes

Core Windows Processes

Room Sysinternals

Room Windows Event Logs

Windows Event Logs

Room Sysmon

Room Osquery: The Basics

Osquery: The Basics

Room Wazuh

Room Monday Monitor

Room Retracted

Topic Rewind Recap

Section 5

Security Information and Event Management

Room Introduction to SIEM

Introduction to SIEM

Room Elastic Stack: The Basics

Elastic Stack: The Basics

Room ItsyBitsy

Room Splunk: The Basics

Splunk: The Basics

Room Incident Handling With Splunk

Incident Handling With Splunk

Room Investigating with Splunk

Investigating with Splunk

Room Benign

Topic Rewind Recap

Scenario Introduction to Phishing

Introduction to Phishing

Section 6

Digital Forensics and Incident Response

Room DFIR: An Introduction

DFIR: An Introduction

Room Windows Forensics 1

Windows Forensics 1

Room Windows Forensics 2

Windows Forensics 2

Room Linux Forensics

Linux Forensics

Room Autopsy

Room Redline

Room KAPE

Room Volatility

Room Velociraptor

Room TheHive Project

TheHive Project

Room Intro to Malware Analysis

Intro to Malware Analysis

Room Unattended

Room Disgruntled

Room Critical

Room Secret Recipe

Topic Rewind Recap

Section 7

Phishing Analysis

Room Phishing Analysis Fundamentals

Phishing Analysis Fundamentals

Room Phishing Emails in Action

Phishing Emails in Action

Room Phishing Analysis Tools

Phishing Analysis Tools

Room Phishing Prevention

Phishing Prevention

Room The Greenholt Phish

The Greenholt Phish

Room Snapped Phish-ing Line

Snapped Phish-ing Line

Topic Rewind Recap

Scenario Phishing Unfolding

Phishing Unfolding

Section 8

SOC Level 1 Capstone Challenges

Room Tempest

Room Boogeyman 1

Room Boogeyman 2

Room Boogeyman 3

Topic Rewind Recap

Scenario Hidden Hooks

Scenario Open Door

We use cookies to ensure you get the best user experience. For more information see our cookie policy.