Learning path

SOC Level 1

This path introduces a wide array of essential defensive security topics and real-world analysis scenarios. By completing it, you will gain the knowledge and practical skills needed to become a successful SOC Level 1 Analyst, or to better structure your existing expertise if you are already working in the field.

Modules

14

Hands-on labs

65

Difficulty level

easy

Path SOC Level 1

Learn the skills needed to jumpstart your career as a SOC Level 1 Analyst or Security Analyst.

Learn SOC tools and operations
Explore network and web attacks
Monitor endpoints for threats
Utilise SIEM to handle incidents

Certificate of Completion

Example learning path completion certificate

Complete this learning path to
develop your skills and earn a
certificate of completion.

SAL1 Professional Certification completion certificate

SAL1 Professional Certification

Get hired with an industry-recognised, practical defensive certification.

Introduction

The Security Operations Center (SOC) is a central hub for securing many large organizations, and junior analysts are among the most numerous and demanding roles in a SOC. In the analyst role, you will work with logs, triage and prioritize alerts, collaborate with your teammates and other departments, and be the first line of defense in reacting to cyber incidents. This comprehensive path covers the necessary technical and operational skills to make you a qualified, universal SOC analyst.

Section 1

Blue Team Introduction

Room Junior Security Analyst Intro

Junior Security Analyst Intro

Room SOC Role in Blue Team

SOC Role in Blue Team

Room Humans as Attack Vectors

Humans as Attack Vectors

Room Systems as Attack Vectors

Systems as Attack Vectors

Section 2

SOC Team Internals

Room SOC L1 Alert Triage

SOC L1 Alert Triage

Room SOC L1 Alert Reporting

SOC L1 Alert Reporting

Room SOC Workbooks and Lookups

SOC Workbooks and Lookups

Room SOC Metrics and Objectives

SOC Metrics and Objectives

Scenario Introduction to Phishing

Introduction to Phishing

Section 3

Core SOC Solutions

Room Introduction to EDR

Introduction to EDR

Room Introduction to SIEM

Introduction to SIEM

Room Splunk: The Basics

Splunk: The Basics

Room Elastic Stack: The Basics

Elastic Stack: The Basics

Room Introduction to SOAR

Introduction to SOAR

Section 4

Cyber Defence Frameworks

Room Pyramid Of Pain

Pyramid Of Pain

Room Cyber Kill Chain

Cyber Kill Chain

Room Unified Kill Chain

Unified Kill Chain

Room MITRE

Room Summit

Room Eviction

Section 5

Phishing Analysis

Room Phishing Analysis Fundamentals

Phishing Analysis Fundamentals

Room Phishing Emails in Action

Phishing Emails in Action

Room Phishing Analysis Tools

Phishing Analysis Tools

Room Phishing Prevention

Phishing Prevention

Room The Greenholt Phish

The Greenholt Phish

Room Snapped Phish-ing Line

Snapped Phish-ing Line

Scenario Phishing Unfolding

Phishing Unfolding

Section 6

Network Traffic Analysis

Room Network Traffic Basics

Network Traffic Basics

Room Wireshark: The Basics

Wireshark: The Basics

Room Wireshark: Packet Operations

Wireshark: Packet Operations

Room Wireshark: Traffic Analysis

Wireshark: Traffic Analysis

Room NetworkMiner

Section 7

Network Security Monitoring

Room Network Security Essentials

Network Security Essentials

Room Network Discovery Detection

Network Discovery Detection

Room Data Exfiltration Detection

Data Exfiltration Detection

Room Man-in-the-Middle Detection

Man-in-the-Middle Detection

Room IDS Fundamentals

IDS Fundamentals

Room Snort

Section 8

Web Security Monitoring

Room Web Security Essentials

Web Security Essentials

Room Detecting Web Attacks

Detecting Web Attacks

Room Detecting Web Shells

Detecting Web Shells

Room Detecting Web DDoS

Detecting Web DDoS

Scenario Upload and Conquer

Upload and Conquer

Section 9

Windows Security Monitoring

Room Windows Logging for SOC

Windows Logging for SOC

Room Windows Threat Detection 1

Windows Threat Detection 1

Room Windows Threat Detection 2

Windows Threat Detection 2

Room Windows Threat Detection 3

Windows Threat Detection 3

Section 10

Linux Security Monitoring

Room Linux Logging for SOC

Linux Logging for SOC

Room Linux Threat Detection 1

Linux Threat Detection 1

Room Linux Threat Detection 2

Linux Threat Detection 2

Room Linux Threat Detection 3

Linux Threat Detection 3

Scenario BlackCat

Section 11

Malware Concepts for SOC

Room Malware Classification

Malware Classification

Room Intro to Malware Analysis

Intro to Malware Analysis

Room Living Off the Land Attacks

Living Off the Land Attacks

Room Shadow Trace

Section 12

Threat Analysis Tools

Room Intro to Cyber Threat Intel

Intro to Cyber Threat Intel

Room File and Hash Threat Intel

File and Hash Threat Intel

Room IP and Domain Threat Intel

IP and Domain Threat Intel

Room Invite Only

Section 13

SIEM Triage for SOC

Room Log Analysis with SIEM

Log Analysis with SIEM

Room Alert Triage With Splunk

Alert Triage With Splunk

Room Alert Triage With Elastic

Alert Triage With Elastic

Room ItsyBitsy

Room Benign

Section 14

SOC Level 1 Capstone Challenges

Room Tempest

Room Boogeyman 1

Room Boogeyman 2

Room Boogeyman 3

Scenario Hidden Hooks

Scenario Open Door

We use cookies to ensure you get the best user experience. For more information contact us.