SOC Analyst

You are currently working through Security Purpose and Defensive Outcomes in this module.

• Security Purpose and Defensive OutcomesRecommended
• Confidentiality, Integrity, and AvailabilityAvailable
• Authentication, Authorization, and AccountabilityAvailable

+5 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Network Layers and Why They MatterAvailable
• Network Identity: IP Addresses, MAC Addresses, and AttributionAvailable
• Ports, Protocols, and ServicesAvailable

+5 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Attacker Motivations and ObjectivesAvailable
• The Shape of an ATT&CKAvailable
• Initial Access PatternsAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Processes, Users, and the Idea of Security ContextAvailable
• Windows Essentials for DefendersAvailable
• Linux Essentials for DefendersAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Cryptography Purpose and Defender ContextAvailable
• Symmetric CryptographyAvailable
• Asymmetric CryptographyAvailable

+4 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Web Architecture and Request FlowAvailable
• URLs, Domains, DNS, and HostingAvailable
• HTTPS and TLS in the BrowserAvailable

+5 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Identity, Accounts, and the Identity LifecycleAvailable
• Authentication Factors and Modern AuthenticationAvailable
• Federated Identity: SSO, OAuth, and OpenID ConnectAvailable

+4 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• System Hardening Purpose and Defensive ValueAvailable
• Configuration Baselines and BenchmarksAvailable
• Patch ManagementAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Design Security TelemetryAvailable
• Build Reliable Source CoverageAvailable
• Protect the Telemetry PipelineAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Understand the Blue Team MissionAvailable
• Follow the Current Incident-Response ModelAvailable
• Design a Sustainable SOC Operating ModelAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Establish Governance and Decision RightsAvailable
• Navigate Obligations and FrameworksAvailable
• Govern Risk DecisionsAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Model Cloud Architecture and DependenciesAvailable
• Apply Shared Responsibility PreciselyAvailable
• Protect Human and Workload IdentityAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• The SOC Analyst Role in DepthAvailable
• A Structured Methodology for Alert TriageAvailable
• Investigation Deep Dive: Pivoting Through TelemetryAvailable

+4 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Detection Engineering Purpose and WorkflowAvailable
• Building Detections from Threat to RuleAvailable
• Testing and Validating DetectionsAvailable

+4 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Prepare, Validate, and ActivateAvailable
• Scope and Investigate the IncidentAvailable
• Select and Verify ContainmentAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Frame an Authorized HuntAvailable
• Build a Trustworthy Evidence PlanAvailable
• Analyze Rarity and Behavior SafelyAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Threat Intelligence Purpose and PracticeAvailable
• Sources and Evaluating IntelligenceAvailable
• Applying Intelligence in OperationsAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• SIEM Data Models and Log NormalizationAvailable
• Aggregation and Statistical Analysis for Threat DetectionAvailable
• Time-Series Analysis and Multi-Source CorrelationAvailable

+2 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Use ATT&CK Without Overclaiming CoverageAvailable
• From Hypothesis to Telemetry ContractAvailable
• Build Endpoint Behavior AnalyticsAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Validate the Alert and Open the CaseAvailable
• Expand Scope and Declare the IncidentAvailable
• Coordinate and Verify ContainmentAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Questions, Evidence, and Lab SafetyAvailable
• Static Triage and Hypothesis BuildingAvailable
• Controlled Behavioral AnalysisAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• Preparing a Defensible HuntAvailable
• Living-Off-The-Land Behavior ChainsAvailable
• Cloud Control-Plane and Workload HuntsAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• The Incident Commander RoleAvailable
• Multi-Team Coordination During IncidentsAvailable
• Communication Under PressureAvailable

+3 more lessons in this module

Start with the suggested lesson, or choose another lesson that fits what you need now.

• SOC Operating ModelsAvailable
• Staffing and Shift DesignAvailable
• Alert Management and SLA DesignAvailable

+2 more lessons in this module