SOC Level 1 Capstone Challenges

Investigate critical incidents and apply all the skills needed to be an effective SOC analyst while handling various artefacts.

In this module, you will handle real-world incidents composed of different Tactics, Techniques, and Procedures (TTPs), starting from initial access to data exfiltration. You will learn how to handle different artefacts, including memory dumps, email samples, packet captures, and event logs. Additionally, you will learn how to navigate different data sources ingested in an SIEM and correlate the significant findings to complete the investigation.