SOC Level 2

About this course

Develop the methodical mindset of an incident investigator. Over three days you will detect, hunt and respond to threats at scale, investigate adversary tactics mapped to MITRE ATT&CK, build attack timelines and trace incidents back to their entry point.

What you'll learn

• Develop a robust and reliable investigator's mindset to approach incidents methodically
• Learn industry-standard methodologies and tools for detecting, hunting, and responding to cyber threats across enterprise environments
• Gain experience performing incident response and threat hunting at scale
• Learn to investigate and identify advanced adversary tactics following the MITRE ATT&CK framework, including execution artifacts, lateral movement, credential theft, living off the land techniques, persistence, defense evasion, command and control, and many more
• Learn to perform effective attack timeline analysis, and guide effective incident response and remediation efforts
• Investigate the root cause of security incidents by uncovering the entry point

Curriculum

Who it's for

SOC analysts with Level 1 experience moving to investigation and response.

Before you start

• Networking Fundamentals: Practical Help Desk (PHD) or equivalent
• Operating System Fundamentals: Practical Help Desk (PHD) or equivalent
• Security Operations Fundamentals
• Network Traffic Analysis
• Endpoint Security Monitoring
• Log Analysis and Management
• Security Information and Event Management (SIEM)
• Basic Digital Forensics Exposure

Part of these Alalamia diplomas

• Alalamia Diploma in Cybersecurity Analysis