Certified SOC Analyst (CSA)

Security Operations Security Operations Center (SOC)

Need of SOC SOC Capabilities

SOC Operations

SOC Workflow Components of SOC

Types of SOC Models

SOC Implementation Challenges in Implementation of SOC

Cyber Threats Intent-Motive-Goal Tactics-Techniques-Procedures (TTPs)

Opportunity-Vulnerability-Weakness Network, Host, and Application-Level Attacks

Cyber Threat IoCs Hacking Methodologies

Log, Event and Incident

Typical Log Sources

Need of Log Logging Requirements

Typical Log Format

Local Logging Centralized Logging

Centralized Logging Challenges

Security Information and Event Management (SIEM)

Need of SIEM Typical SIEM Capabilities SIEM Architecture and Its Components

SIEM Deployment Incident Detection with SIEM Use Case Examples for Application-Level Incident Detection

Use Case Examples for Insider Incident Detection

Use Case Examples for Network Level Incident Detection

Use Case Examples for Host Level Incident Detection

Handling Alert Triaging and Analysis

Cyber Threat Intelligence (CTI)

Types of Threat Intelligence

Threat Intelligence-driven SOC Benefit of Threat Intelligence to SOC Analyst

Threat Intelligence Use Cases for SOC Analyst

Integration of Threat Intelligence into SIEM Threat Intelligence Use Cases for Enhanced Incident Response

Enhancing Incident Response by Establishing SOPs for Threat Intelligence

Incident Response SOC and IRT Collaboration Incident Response (IR) Process Overview

Responding to Network Security Incidents

Responding to Application Security Incidents

Responding to Email Security Incidents

Responding to an Insider Incidents

Responding to Malware incidents