Cybersecurity Skills & Standards
SOC Level 1
Four days of hands-on training for the first line of the security operations centre.
4 daysFoundation4 modules
About this course
Four days of hands-on training for the first line of the security operations centre. You will learn security operations fundamentals, analyse phishing and network traffic, hunt malicious processes and connections on Windows, search data with Splunk and acquire disk and memory images with FTK Imager.
What you'll learn
- Security Operations Fundamentals
- Phishing Analysis
- Network Security Monitoring
- Network Traffic Analysis
- Endpoint Security Monitoring
- Endpoint Detection and Response
- Log Analysis and Management
- Security Information and Event Management (SIEM)
- Threat Intelligence
- Digital Forensics
- Incident Response
Curriculum
4 modules
- Class Introduction
- Lab Access, Setup, and Configuration
- Understanding the SOC
- Understanding Phishing Attacks and Techniques
- Email Analysis
- URL Analysis
- Attachment Analysis
- MalDoc Analysis
- Phishing Defenses
- Ticket Challenge - Walkthrough and Break
- Understanding Packets and Flows
- Network Traffic Analysis with TCPDump
- Network Traffic Analysis with Wireshark
- Ticket Challenge
- Understanding Endpoint Security
- Windows - Hunting Malicious Network Connections
- Windows - Hunting Malicious Processes
- Live IR with SysInternals and Autoruns
- Windows - Understanding Core Processes
- Windows - Hunting Persistence
- Ticket Challenge - Walkthrough and Break
- Linux - Hunting Malicious Network Connections
- Linux - Hunting Malicious Processes
- Linux - Understanding Core Processes
- Linux - Hunting Persistence
- Ticket Challenge - Walkthrough and Break
- Understanding the SIEM
- Common Attack Signatures
- Command Line Log Analysis
- Ticket Challenge
- Splunk Introduction
- Search Processing Language
- Search Commands
- Reporting, Alerting, and Dashboards
- Investigating Intrusions with Splunk
- Deploying Forwarders
- Ticket Challenge - Walkthrough and Break
- Understanding Threat Intelligence
- Threat Intelligence Frameworks
- Mitre Att&ck
- Ticket Challenge - Walkthrough and Break
- Detecting Malware with YARA
- Reading and Writing YARA Rules
- Ticket Challenge
- Understanding Digital Forensics Investigations
- Disk Image Acquisition with FTK Imager
- Memory Acquisition with FTK Imager
- Ticket Challenge - Walkthrough and Break
- Windows Forensic Artifacts
- Forensic Image Analysis with Autopsy
- Memory Analysis with Volatility
- Ticket Challenge - Walkthrough and Break
- The Incident Response Process
- Training Wrap-Up
Who it's for
Aspiring and junior SOC analysts with basic Windows and Linux familiarity.
Before you start
- 8gb Ram & 256gb Hdd
- Up-to-Date OS & Internet Browser
- Stable Internet connection
- Basic familiarity with Windows and Linux operating system components.
- Experience working with the command-line and knowledge of basic commands and navigation (e.g., cd, ls, cat).
- Knowledge of network concepts such as subnets, internal vs. external IP addresses, network address translation, and routing.
- Understanding of foundational security concepts such as the CIA triad, security controls, encryption, and hashing.
Part of these Alalamia diplomas
Related courses
More in Cybersecurity Skills & Standards →Advanced
Cyber Security for the End User - Identifying and Preventing Advanced Threats - Intermediate
Cybersecurity Skills & Standards
View course →Foundation
DVMS Cyber Resilience Professional Awareness
Cybersecurity Skills & Standards
View course →Foundation
DVMS Cyber Resilience Professional Foundation
Cybersecurity Skills & Standards
View course →Intermediate
DVMS Cyber Resilience Professional Practitioner
Cybersecurity Skills & Standards
View course →Intermediate
Ethical Hacker Bootcamp
Cybersecurity Skills & Standards
View course →Intermediate
Hacking & Defending Active Directory
Cybersecurity Skills & Standards
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.