EC-Council
EC-Council SOC Essentials (SCE)
كوّن صورة واضحة عن آلية عمل مركز العمليات الأمنية. خلال يومين تتعلّم أساسيات الشبكات والأمن، والتهديدات السيبرانية، ومكوّنات المركز وبنيته، وإدارة السجلات، واستخبارات التهديدات، وكيف تُكشف الحوادث وتُحلَّل وتُعالَج.
يومانتأسيسي8 وحدات
نظرة عامة
كوّن صورة واضحة عن آلية عمل مركز العمليات الأمنية. خلال يومين تتعلّم أساسيات الشبكات والأمن، والتهديدات السيبرانية، ومكوّنات المركز وبنيته، وإدارة السجلات، واستخبارات التهديدات، وكيف تُكشف الحوادث وتُحلَّل وتُعالَج.
ما ستتعلّمه
المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.
- Learn the basics of computer networks
- Dive deep into the cyber threat concepts like threats, vulnerabilities, and attacks.
- Gain insights into the Security Operations Center (SOC) architecture and learn the importance, workflow, and processes of SOC.
- Understand advanced architectural concepts like SIEM architecture and deployment models.
- Learn what log management is and its key parts, like events, logs, and incidents.
- Learn how you can perform centralized management of logs.
- Gain knowledge on dashboards, reports, and incident escalation in terms of dealing with real positive and false alerts.
- Discover the sources, types, and lifecycle of threat intelligence and get introduced to threat hunting.
- Deep dive into the Incident response lifecycle.
المنهاج
8 وحدات
- Computer Network
- TCP/IP Model
- OSI Model
- Types of Networks
- Network Model
- Network Topologies
- TCP/IP Protocol Suite
- Network Security Controls
- Network Security Devices
- Windows Security
- Unix/Linux Security
- Web Application Fundamentals
- Information Security Standards, Laws, and Acts
- Cyber Threats
- Intent-Motive-Goal
- Tactics-Techniques-Procedures (TTPs)
- Opportunity-Vulnerability-Weakness
- Vulnerability
- Threats & Attacks
- Example of Attacks
- Network-based Attacks
- Application-based
- Host Based Attacks
- Insider Attacks
- Malware (Viruses, Worms, Ransomware, etc.)
- Phishing and Social Engineering
- What is a Security Operations Center (SOC)?
- Importance of SOC
- SOC Team Roles and Responsibilities
- SOC KPI
- SOC Metrics
- SOC Maturity Models
- SOC Workflow and Processes
- Challenges in Operating a SOC
- Key Components of a SOC
- People in SOC
- Processes in SOC
- Technologies in SOC
- SOC Architecture and Infrastructure
- Different Types of SOC and Their Purposes
- Introduction to SIEM
- SIEM Architecture
- SIEM Deployment Models
- Data Sources in SIEM
- SIEM Logs
- Networking in SIEM
- Endpoint Data in SIEM
- Incident
- Event
- Log
- Typical Log Sources
- Need of Log
- Typical Log Format
- Local Log Management
- Centralized Log Management
- Logging Best Practices
- Logging/Log Management Tools
- SIEM Use Case Development
- Security Monitoring and Analysis
- Correlation Rules
- Dashboards
- Reports
- Alerting
- Triaging Alerts
- Dealing with False Positive Alerts
- Incident Escalation
- Communication Paths
- Ticketing Systems
- Introduction to Threat Intelligence
- Threat Intelligence Sources
- Threat Intelligence Types
- Threat Intelligence Lifecycle
- Role of Threat Intelligence in SOC Operations
- Threat Intelligence Feeds
- Threat Intelligence Sharing and Collaboration
- Threat Intelligence Tools/Platforms
- Introduction to Threat Hunting
- Threat Hunting Techniques
- Threat Hunting Methodologies
- Role of Threat Hunting in SOC Operations
- Leveraging Threat Intelligence for Hunting
- Threat Hunting Tools
- Incident Handling Process
- Incident Classification and Prioritization
- Incident Response Lifecycle
- Preparation
- Identification
- Containment
- Eradication
- Recovery
- Post-Incident Analysis and Reporting
لمن هذه الدورة
الطلاب والمبتدئون الذين يستهدفون أدوار مراكز العمليات الأمنية.
قبل أن تبدأ
لا متطلبات مسبقة رسمية. يكفي الفضول والاستعداد للتطبيق العملي.
دورات ذات صلة
المزيد في EC-Council ←تأسيسي
Artificial Intelligence Essentials (AIE)
EC-Council
تفاصيل الدورة ←متوسط
Certified AI Program Manager (CAIPM)
EC-Council
تفاصيل الدورة ←متوسط
Certified Offensive AI Security Professional (COASP)
EC-Council
تفاصيل الدورة ←متوسط
Certified Responsible AI Governance & Ethics (CRAGE)
EC-Council
تفاصيل الدورة ←متوسط
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
تفاصيل الدورة ←متوسط
EC-Council Certified Chief Information Security Officer (C|CISO)
EC-Council
تفاصيل الدورة ←لنرسم خطوتك التالية معاً.
أخبرنا بالدورة أو الشهادة التي تهمّك، ونرسل لك المنهاج والمواعيد القادمة والرسوم وخيارات التدريب الخاص لفريقك.