SOC Analyst

Learn basic cybersecurity concepts such as CIA triad, threats, vulnerabilities, risks, malware, phishing, attacks, defense controls, and SOC responsibilities.

Learn TCP/IP, OSI model, IP addressing, ports, protocols, DNS, DHCP, HTTP, HTTPS, VPN, firewalls, routing, NAT, and common network attack patterns.

Learn Linux logs, Windows Event Viewer, authentication logs, system logs, application logs, security logs, users, processes, services, and basic investigation commands.

Learn what SIEM is, how logs are collected, normalized, indexed, searched, correlated, enriched, and converted into alerts for security monitoring.

Learn how to review alerts, remove false positives, identify true positives, check severity, collect evidence, investigate timelines, and escalate incidents properly.

Learn indicators of compromise such as IP addresses, domains, URLs, hashes, filenames, email indicators, user agents, registry keys, and attacker infrastructure.

Learn endpoint monitoring, antivirus, EDR alerts, process trees, command-line analysis, persistence, suspicious files, registry changes, and endpoint response basics.

Learn phishing investigation, email headers, spoofing, malicious attachments, suspicious links, malware basics, sandbox reports, payload behavior, and user reporting workflows.

Learn incident response lifecycle, containment, eradication, recovery, severity classification, escalation matrix, communication, evidence handling, playbooks, and documentation.

Learn SOC reporting, shift handover, ticket updates, incident summaries, resume building, interview preparation, portfolio creation, and SOC career growth paths.