Day 1: Understanding the SOC Environment

• Welcome & Introduction
  • What do you know about SOC?
  • Workflow of SOC
  • Overview of SOC’s growing role in cybersecurity
• What Is a SOC (Security Operations Center)?
  • SOC roles: Tier 1, Tier 2, Tier 3
  • Key SOC responsibilities: monitoring, detection, response
  • Types of SOCs: Internal, MSSP, Hybrid
• Essential SOC Tools Explained
  • SIEM (e.g., Splunk)
  • IDS/IPS, EDR, SOAR, Ticketing systems
  • Why they’re used in incident monitoring
• SOC & Cybersecurity Frameworks
  • Overview of MITRE ATT&CK
  • Cyber Kill Chain model
• Wrap-Up + Q&A
  • Recap with SOC Quiz (verbal/theoretical)

Day 2: Analyst Workflows, Attack Awareness & Career Tips

• Understanding Threats & Attack Patterns
  • Common threat types (malware, phishing, insider threats)
  • How alerts are generated (theory of log sources)
  • False positives vs true incidents
• Incident Response Theory
  • The 6 phases of incident response
  • Alert triage and escalation process
  • Role of documentation & ticketing
• Becoming a SOC Analyst: Career Roadmap
  • Skills and mindset required
  • Certifications: CompTIA Security+, CEH, CSA
  • Interview preparation, and learning paths
• Q&A