SOC & Incident Response
Security Operations Center fundamentals and incident response: SIEM, threat hunting, forensics and playbooks. 32-hour corporate training.
What You'll Learn
5 modules · 28 topics · 32 hours
SOC Fundamentals
- SOC structure
- Security monitoring
- Analyst tiers
- Threat intelligence
- Metrics
SIEM
- SIEM architecture
- Log collection
- Correlation rules
- Alerts
- Use cases
- Splunk/ELK/Sentinel
Incident Response
- NIST IR framework
- Preparation
- Detection and analysis
- Containment
- Eradication
- Recovery
- Lessons learned
Threat Hunting
- Proactive hunting
- IOCs
- MITRE ATT&CK
- Hypothesis-driven hunting
- Tools
Digital Forensics
- Forensic process
- Evidence collection
- Disk/memory forensics
- Timeline analysis
- Reporting
Course Overview
Practical SOC and incident response training covering monitoring, detection, analysis, containment and forensics. Hands-on with SIEM and IR tools.
Who Should Attend
SOC analysts, Incident responders, Threat hunters, Security engineers.
Prerequisites
Networking and security fundamentals.
Tools & Technologies
Splunk/ELK/Sentinel, Wireshark, Volatility, FTK Imager, MITRE ATT&CK Navigator
Frequently Asked Questions
SOC analysts, Incident responders, Threat hunters, Security engineers.
Networking and security fundamentals.
Yes. We provide SIEM sandbox and forensic artifacts for hands-on practice.
We cover Splunk, ELK Stack and Microsoft Sentinel; focus depends on your environment.
Ready to Upskill Your Team?
Request a quote for SOC & Incident Response corporate training. We'll customize the curriculum, schedule and delivery mode to fit your team.