Certified SOC Analyst (CSA)
SU-410(3 days)
Certified SOC Analyst (CSA)
18.800 DKK
(excl. VAT)
Course calendar
Description
The course takes a holistic approach to training the participant. It covers everything from understanding different attack methods to working with Incident Response Teams (IRT) when security events occur. The course gives you in-depth knowledge, so you can see the connections between incidents and the contents of log files. You also gain experience with various SOC processes, including centralized log management (CLM), security information and event management (SIEM) use case development, alert triage and incident response.
We go through selected use cases for SIEM solutions. You practice identifying intrusion attempts with signature-based and anomaly-based detection, and you practice validating the incidents. Log correlation and incident detection remain the primary tasks of a SOC analyst. The course also teaches participants how SOC and IRT work together from the moment an incident is first detected until it has been eliminated and normal operations have been restored.
The course is not built around a single operating system or a single software vendor. The teaching and exercises span the Windows, Linux and macOS operating systems, and the tools likewise come from most of the leading vendors in the field.
The course has a broad target audience, so everyone in the IT department, from frontline support to IT administrators, will benefit from its content.
Note: The CSA certification exam is included in the course price.
Related exam
Prerequisites
The prerequisites for participants are good technical knowledge of the operating systems in use and good technical knowledge of networking.
Certification bundles
Module overview
Security Operations Security Operations Center (SOC)
Need of SOC SOC Capabilities
SOC Operations
SOC Workflow Components of SOC
Types of SOC Models
SOC Implementation Challenges in Implementation of SOC
Cyber Threats Intent-Motive-Goal Tactics-Techniques-Procedures (TTPs)
Opportunity-Vulnerability-Weakness Network, Host, and Application-Level Attacks
Cyber Threat IoCs Hacking Methodologies
Log, Event and Incident
Typical Log Sources
Need of Log Logging Requirements
Typical Log Format
Local Logging Centralized Logging
Centralized Logging Challenges
Security Information and Event Management (SIEM)
Need of SIEM Typical SIEM Capabilities SIEM Architecture and Its Components
SIEM Deployment Incident Detection with SIEM Use Case Examples for Application-Level Incident Detection
Use Case Examples for Insider Incident Detection
Use Case Examples for Network Level Incident Detection
Use Case Examples for Host Level Incident Detection
Handling Alert Triaging and Analysis
Cyber Threat Intelligence (CTI)
Types of Threat Intelligence
Threat Intelligence-driven SOC Benefit of Threat Intelligence to SOC Analyst
Threat Intelligence Use Cases for SOC Analyst
Integration of Threat Intelligence into SIEM Threat Intelligence Use Cases for Enhanced Incident Response
Enhancing Incident Response by Establishing SOPs for Threat Intelligence
Incident Response SOC and IRT Collaboration Incident Response (IR) Process Overview
Responding to Network Security Incidents
Responding to Application Security Incidents
Responding to Email Security Incidents
Responding to an Insider Incidents
Responding to Malware incidents
Free course advice
We care a lot about helping you find the course path that creates the most value for you and your workplace. Get in touch with our course advisors — they're ready to help you, free of charge and with no obligation.
I can't give anything less than 5 stars across the board. Either you're truly in a class of your own, or I've just been to the wrong course venues before. Fantastic place and atmosphere.... once you've learned to find your way around :-)
Your instructors are exceptional; skilled, competent and good at teaching - so you have everything you need to get off to a good start.
You have fantastic facilities, good food and lovely people throughout the building.
A really good, in-depth course. Your course facilities at Karlebogaard are nothing short of fantastic. A beautiful historic house with lots of fun stories and great course rooms. The course itself was very useful. I learned everything I had hoped to and then some. My instructor was damn good and really funny. He made it a pleasure, and the hours flew by.
Probably the best course I've ever taken and the best instructor I've ever had!! Really good depth and thorough explanations, and on top of that, fantastic food!!!
Delicious food, cozy facilities, good structure and atmosphere. I'll be back when I can.
Absolutely the best course I've ever taken!
The course venue is so inviting and welcoming that it has been a pleasure to be here. Clean, tidy and full of charm. I attended a course where all the individual parts came together into a greater whole that can hardly be described.
I got a lot out of the course. It opened my eyes to possibilities I didn't know existed. I'm sure this won't be the last time we're in touch with SuperUsers.
I never in my wildest dreams imagined that a course venue could be so beautiful. I don't know if it's true, but I have a feeling that the surroundings rub off on the people who work here, so everyone seems incredibly happy.
There's a really great atmosphere. All the way from the woman at the reception desk to the people who work in the kitchen.
The instructor tailored the course to my level to a very large extent and was flexible. I had very high expectations, and they were exceeded.
Great precision, good exercises, good pace, a great atmosphere and maximum learning.
The instructor was very pleasant and the exercises were extremely good. I really learned a lot about the topics the course covered.
On top of that, really nice, calm and green surroundings with good catering - especially good food. I would like to take my courses here again next time.
It was a real pleasure to take a course at SuperUsers. The week we spent on the course was worth the money and means that we can now save many consultant hours. It's always nice to have the knowledge in-house.
There is a relaxed atmosphere in the classroom, lovely surroundings in the building itself, and skilled instructors who do a really good job.
I started using all the knowledge I soaked up on the course almost right away, and now we are well underway with developing our future cloud solution.
There is no doubt about who we will turn to if we need other courses.
This is my first time at SuperUsers. It has been a really good experience. The instructor seems very experienced and competent.
The instructor's strong technical background made the course and the in-depth answers to questions a good experience.
A really nice course venue in pleasant surroundings that make for a good setting for focused learning. The instructor came across as well prepared, with extensive knowledge of the relevant topics.
The instructor also showed a strong ability to answer any questions that came up during the course.
I'll be back the next time I need to take a course. It's a lovely place, the food is fantastic, and the instructor is very knowledgeable and happy to share that knowledge!
The technical depth of the course was really good. The instructor's knowledge went much deeper than the curriculum necessarily requires.
You could throw all kinds of curveballs at the instructor, and he had it all under control - he also made the content exciting.
We have now completed Microsoft 365 courses for a total of 5 people here in our department. Everyone agrees that it was an excellent course with a skilled instructor and communicator who could discuss and explain things at the right level, while also being efficient and bringing humor.
It has been a really good experience.
It's calm and quiet at SuperUsers' country venue. Good atmosphere and catering. Some thought has gone into healthy eating when it comes to food and cake, so it doesn't get completely out of hand.
The instructor is knowledgeable about the topics and readily puts them in a broader perspective by relating them to other relevant areas. It's rewarding that this is possible too, and it gives you ideas for further study.
In addition, the instructor was engaged and entertaining to have presenting the content.
As always, it was a great experience, and you learn a lot in a short time from some very skilled instructors.
I work in Azure almost every day, and both courses have been really good at helping me understand Azure better.
The instructor is very presentation-oriented and gets you involved in the teaching and the material. He is good at varying the teaching so it never gets monotonous.
It is clear that the instructor has hands-on experience and not just the theory, with many good examples that related to real-world challenges we might encounter.
Good facilities and good food, without drowning in unhealthy habits.
Very good course, the instructor was the best. I've been here at SuperUsers before, now I'm here again, and hopefully coming back another time.
The instructor seemed very competent and has extensive knowledge of his field. He was good at explaining things in a clear and humorous way. There were also simple exercises that gave a good understanding.
The instructor was really good at going in depth while still making sure everyone was keeping up. A really nice venue and room, and great food.
There was no doubt that the instructor knew exactly what he was talking about, and even the simplest questions were answered gladly, without anyone being made to feel stupid.
A lovely, cozy place where the receptionist, the kitchen and the instructors make you feel at home. A good setting makes for good learning. Really good food that helps round out the whole experience of taking a course at SuperUsers.
Really happy with the venue and the stay over in the horse stable. I'll see if I can come back here for the next course I take. A really beautiful building, and great to experience a place like this. A fantastic place to hold a course.
