Security Operations Centers are the frontline of enterprise defense, and skilled SOC analysts are in high demand. This program trains you to monitor, triage, and respond to real security alerts using industry-standard SIEM tools. You’ll practice log analysis, threat hunting, and incident escalation on live-fire lab scenarios modeled on real breaches, building the instincts hiring managers look for in a Tier 1/Tier 2 SOC analyst.
What You Will Learn
- Monitor and triage security alerts across SIEM platforms
- Build and tune detection rules using the MITRE ATT&CK framework
- Investigate phishing, malware, and lateral-movement incidents
- Document findings and escalate through incident response workflows
- Use log correlation to uncover multi-stage attacks
Course Curriculum
The course runs across four modules: SOC fundamentals and log sources, SIEM configuration and alert tuning, incident triage and threat hunting, and a capstone week running a simulated breach investigation end to end.
What You Will Learn
- Monitor live SOC dashboards and triage real alert queues
- Hunt threats using MITRE ATT&CK-mapped detections
- Investigate phishing, malware, and lateral movement cases
- Escalate incidents through a real IR workflow
- Work toward a Tier 1/Tier 2 SOC-ready skillset
Tools & Technologies Covered
- Splunk
- IBM QRadar
- Elastic SIEM
- Sysmon
- MITRE ATT&CK Navigator