SOC Essentials (S|CE) Training

• Module 1: Computer Network and Security Fundamentals
  • TCP/IP Model
  • OSI Model
  • Types of a Network
  • Network Topologies
  • Network Hardware Components
  • TCP/IP Protocol Suite
  • Network Security Controls
  • Network Security Devices
  • Windows Security
  • Unix/Linux Security
  • Web Application Fundamentals
  • Information Security Standards, Laws, and Acts
• Module 2: Fundamentals of Cyber Threats
  • Cyber Threats
  • Intent-Motive-Goal
  • Tactics-Techniques-Procedures
  • Opportunity-Vulnerability-Weakness
  • Vulnerability
  • Threats & Attacks
  • Example of Attacks
  • Network-Based Attacks
  • Application-Based Attacks
  • Host-Based Attacks
  • Insider Attacks
  • Malware
  • Phishing and Social Engineering
• Module 3: Introduction to Security Operations Center
  • What is a Security Operations Center (SOC)
  • Importance of SOC
  • SOC Team Roles and Responsibilities
  • SOC KPI
  • SOC Metrics
  • SOC Maturity Models
  • SOC Workflow and Processes
  • Challenges in Operating a SOC
• Module 4: SOC Components and Architecture
  • Key Components of a SOC
  • People in SOC
  • Process in SOC
  • Technologies in SOC
  • SOC Architecture and Infrastructure
  • Different Types of SOCs and Their Purposes
  • Introduction to SIEM
  • SIEM Architecture
  • SIEM Deployment Models
  • Data Sources in SIEM
  • SIEM Logs
  • Network in SIEM
  • Endpoint Data in SIEM
• Module 5: Introduction to Log Management
  • Incident
  • Event
  • Log
  • Typical Log Sources
  • Need of Log
  • Typical Log Format
  • Local Log Management
  • Centralized Log Management
  • Logging Best Practices
  • Logging/Log Management Tools
• Module 6: Incident Detection and Analysis
  • SIEM Use Case Development
  • Security Monitoring and Analysis
  • Correlation Rules
  • Dashboards
  • Reports
  • Alerting
  • Triaging Alerts
  • Dealing with False Positives Alerts
  • Incident Escalation
  • Communication Paths
  • Ticketing Systems
• Module 7: Threat Intelligence and Hunting
  • Introduction to Threat Intelligence
  • Threat Intelligence Sources
  • Threat Intelligence Types
  • Threat Intelligence Lifecycle
  • Role of Threat Intelligence in SOC Operations
  • Threat Intelligence Feeds
  • Threat Intelligence Sharing and Collaboration
  • Threat Intelligence Tools/Platforms
  • Introduction to Threat Hunting
  • Threat Hunting Techniques
  • Threat Hunting Methodologies
  • Role of Threat Hunting in SOC Operations
  • Leveraging Threat Intelligence for Hunting
  • Threat Hunting Tools
• Module 8: Incident Response and Handling
  • Incident Handling Process
  • Incident Classification and Prioritization
  • Incident Response Lifecycle
  • Preparation
  • Identification
  • Containment
  • Eradication
  • Recovery
  • Post-incident Analysis and Reporting

• SOC Analysts
• System Security Professionals
• Security Engineers
• Threat Management Professionals
• Incident Response Teams
• Security Administrators
• Vulnerability Management Professionals
• Students, Graduates, Cybersecurity Professionals
• Anyone who wants to start a career in Cybersecurity and is interested in SOC.

There is no prerequisite for this course.

By the end of this course, learners will:

• Understand the basics of computer networks and their role in cybersecurity.
• Learn the fundamentals of application development and its relevance to security operations.
• Gain insights into Security Operations Center (SOC) architecture, including its importance, workflow, and core processes.
• Explore key cyber threat concepts such as threats, vulnerabilities, and attacks.
• Understand advanced architectural concepts like SIEM architecture and various deployment models.
• Learn the principles of log management and how to perform centralized log management effectively.
• Discover the sources, types, and lifecycle of threat intelligence, and gain an introduction to threat hunting and incident response.