Learning path

SOC Level 1

This path will introduce a wide array of tools and real-life analysis scenarios, enabling you to become a successful Junior Security Analyst.

Modules

8

Hands-on labs

71

Difficulty level

easy

Path SOC Level 1

Learn the skills needed to work as a Junior Security Analyst in a Security Operations Centre.

Detect and analyse traffic anomalies
Monitor endpoints for threats
Utilise SIEM tools to handle incidents
Investigate forensic artefacts

Certificate of Completion

Example learning path completion certificate

Complete this learning path to
develop your skills and earn a
certificate of completion.

SAL1 Professional Certification completion certificate

SAL1 Professional Certification

Get hired with an industry-recognised, practical defensive certification.

Introduction

In the Junior Security Analyst role, you will be a Triage Specialist. You will spend a significant portion of your time triaging or monitoring the event logs and alerts.

The responsibilities of a Junior Security Analyst or Tier 1 SOC Analyst include the following:

Monitor and investigate alerts (most of the time, it's a 24x7 SOC operations environment)
Configure and manage security tools
Develop and implement IDS signatures
Escalate the security incidents to the Tier 2 and Team Lead if needed

Section 1

Cyber Defence Frameworks

Room Junior Security Analyst Intro

Junior Security Analyst Intro

Room Pyramid Of Pain

Pyramid Of Pain

Room Cyber Kill Chain

Cyber Kill Chain

Room Unified Kill Chain

Unified Kill Chain

Room Diamond Model

Room MITRE

Room Summit

Room Eviction

Section 2

Cyber Threat Intelligence

Room Intro to Cyber Threat Intel

Intro to Cyber Threat Intel

Room Threat Intelligence Tools

Threat Intelligence Tools

Room Yara

Room OpenCTI

Room MISP

Room Friday Overtime

Friday Overtime

Room Trooper

Section 3

Network Security and Traffic Analysis

Room Traffic Analysis Essentials

Traffic Analysis Essentials

Room Snort

Room Snort Challenge - The Basics

Snort Challenge - The Basics

Room Snort Challenge - Live Attacks

Snort Challenge - Live Attacks

Room NetworkMiner

Room Zeek

Room Zeek Exercises

Room Brim

Room Wireshark: The Basics

Wireshark: The Basics

Room Wireshark: Packet Operations

Wireshark: Packet Operations

Room Wireshark: Traffic Analysis

Wireshark: Traffic Analysis

Room TShark: The Basics

TShark: The Basics

Room TShark: CLI Wireshark Features

TShark: CLI Wireshark Features

Room TShark Challenge I: Teamwork

TShark Challenge I: Teamwork

Room TShark Challenge II: Directory

TShark Challenge II: Directory

Section 4

Endpoint Security Monitoring

Room Intro to Endpoint Security

Intro to Endpoint Security

Room Core Windows Processes

Core Windows Processes

Room Sysinternals

Room Windows Event Logs

Windows Event Logs

Room Sysmon

Room Osquery: The Basics

Osquery: The Basics

Room Wazuh

Room Monday Monitor

Room Retracted

Section 5

Security Information and Event Management

Room Introduction to SIEM

Introduction to SIEM

Room Investigating with ELK 101

Investigating with ELK 101

Room ItsyBitsy

Room Splunk: Basics

Room Incident handling with Splunk

Incident handling with Splunk

Room Investigating with Splunk

Investigating with Splunk

Room Benign

Scenario Introduction to Phishing

Introduction to Phishing

Section 6

Digital Forensics and Incident Response

Room DFIR: An Introduction

DFIR: An Introduction

Room Windows Forensics 1

Windows Forensics 1

Room Windows Forensics 2

Windows Forensics 2

Room Linux Forensics

Linux Forensics

Room Autopsy

Room Redline

Room KAPE

Room Volatility

Room Velociraptor

Room TheHive Project

TheHive Project

Room Intro to Malware Analysis

Intro to Malware Analysis

Room Unattended

Room Disgruntled

Room Critical

Room Secret Recipe

Section 7

Phishing

Room Phishing Analysis Fundamentals

Phishing Analysis Fundamentals

Room Phishing Emails in Action

Phishing Emails in Action

Room Phishing Analysis Tools

Phishing Analysis Tools

Room Phishing Prevention

Phishing Prevention

Room The Greenholt Phish

The Greenholt Phish

Room Snapped Phish-ing Line

Snapped Phish-ing Line

Scenario Phishing Unfolding

Phishing Unfolding

Section 8

SOC Level 1 Capstone Challenges

Room Tempest

Room Boogeyman 1

Room Boogeyman 2

Room Boogeyman 3

Scenario Upload and Conquer

Upload and Conquer

Scenario Hidden Hooks

Scenario BlackCat

We use cookies to ensure you get the best user experience. For more information contact us.