Begin Your Cybersecurity Journey With SOC Essentials
The SOC Essentials (S|CE) is designed for aspiring security professionals, freshers, and career switchers to provide insights into security operations frameworks and related technologies. With 8 modules covering robust topics from the computer network and security fundamentals to SOC components and architecture, S|CE prepares you to identify
various aspects of cyber threats and secure digital environments. No IT/Cybersecurity experience required for this course. Test your skills with CTF-based Capstone Projects and validate these newly acquired skills in proctored exams. Further, it provides 10+ hours of premium self-paced video training with 6 hands-on labs to simulate real-world scenarios.
Program Information
The SOC Essentials (S|CE) course will provide candidates with the fundamental insights of SOC required to begin a career in the field. Along with comprehensive lecture videos and hands-on labs, the course will help candidates identify the various aspects of cyber threats to secure digital environments.
What Skills You’ll Learn
- Learn the basics of computer network
- Dive deep into the cyber threat concepts like threats, vulnerabilities, and attacks.
- Gain insights into the Security Operations Center (SOC) architecture and learn the importance, workflow, and processes of SOC.
- Understand advanced architectural concepts like SIEM architecture and deployment models.
- Learn what log management is and its key parts, like events, logs, and incidents.
- Learn how you can perform centralized management of logs.
- Gain knowledge on dashboards, reports, and incident escalation in terms of dealing with real positive and false alerts.
- Discover the sources, types, and lifecycle of threat intelligence and get introduced to threat hunting.
- Deep dive into the Incident response lifecycle.
Course outline
Module 1: Computer Network and Security Fundamentals
- TCP/IP Model
- OSI Model
- Types of a Network
- Network Topologies
- Network Hardware Components
- TCP/IP Protocol Suite
- Network Security Controls
- Network Security Devices
- Windows Security
- Unix/Linux Security
- Web Application Fundamentals
- Information Security Standards, Laws, and Acts
Module 2: Fundamentals of Cyber Threats
- Cyber Threats
- Intent-Motive-Goal
- Tactics-Techniques-Procedures
- Opportunity-Vulnerability-Weakness
- Vulnerability
- Threats & Attacks
- Example of Attacks
- Network-Based Attacks
- Application-Based Attacks
- Host-Based Attacks
- Insider Attacks
- Malware
- Phishing and Social Engineering
Module 3: Introduction to Security Operations Center
- What is a Security Operations Center (SOC)
- Importance of SOC
- SOC Team Roles and Responsibilities
- SOC KPI
- SOC Metrics
- SOC Maturity Models
- SOC Workflow and Processes
- Challenges in Operating a SOC
Module 4: SOC Components and Architecture
- Key Components of a SOC
- People in SOC
- Process in SOC
- Technologies in SOC
- SOC Architecture and Infrastructure
- Different Types of SOCs and Their Purposes
- Introduction to SIEM
- SIEM Architecture
- SIEM Deployment Models
- Data Sources in SIEM
- SIEM Logs
- Network in SIEM
- Endpoint Data in SIEM
Module 5: Introduction to Log Management
- Incident
- Event
- Log
- Typical Log Sources
- Need of Log
- Typical Log Format
- Local Log Management
- Centralized Log Management
- Logging Best Practices
- Logging/Log Management Tools
Module 6: Incident Detection and Analysis
- SIEM Use Case Development
- Security Monitoring and Analysis
- Correlation Rules
- Dashboards
- Reports
- Alerting
- Triaging Alerts
- Dealing with False Positives Alerts
- Incident Escalation
- Communication Paths
- Ticketing Systems
Module 7: Threat Intelligence and Hunting
- Introduction to Threat Intelligence
- Threat Intelligence Sources
- Threat Intelligence Types
- Threat Intelligence Lifecycle
- Role of Threat Intelligence in SOC Operations
- Threat Intelligence Feeds
- Threat Intelligence Sharing and Collaboration
- Threat Intelligence Tools/Platforms
- Introduction to Threat Hunting
- Threat Hunting Techniques
- Threat Hunting Methodologies
- Role of Threat Hunting in SOC Operations
- Leveraging Threat Intelligence for Hunting
- Threat Hunting Tools
Module 8: Incident Response and Handling
- Incident Handling Process
- Incident Classification and Prioritization
- Incident Response Lifecycle
- Preparation
- Identification
- Containment
- Eradication
- Recovery
- Post-incident Analysis and Reporting
