SOC

SOC Analyst v1.1

Detection and response fundamentals.

Academic hours112

Class sessions56

Log Analysis Fundamentals

20 academic hours

Parsing, normalization and baseline detection across common log sources.

SIEM Correlation & Alerting

26 academic hours

Building correlation rules and tuning alert thresholds to cut false positives.

Incident Triage Playbooks

24 academic hours

Severity scoring and escalation paths, run live against a simulated incident.

Threat Intel Enrichment

18 academic hours

Pulling IOC feeds into a case and judging source reliability.

Capstone: SOC Shift Simulation

24 academic hours

A full shift, live, with real alerts to triage under time pressure.

Ready to put this together into a course?