SOC & Blue Team tutorials
Operate in the SOC: logs, alerts, and response
Build blue-team skills with SIEM fundamentals, alert triage, log analysis, and incident response workflows using tools like Wazuh, Splunk, and ELK.
Featured in this category
Best place to start
SOC Analyst Foundation: Logs, Alerts and Incident Response
Core SOC workflows with labs, alert scenarios, and IR playbooks.
2
Curated tutorials
…
In catalog
6
Topic areas
How it works
Learn → practice → test → apply
Every tutorial in this category follows the same practical structure so you build real skills, not just theory.
Read & understand
Concepts with examples and diagrams
Practice
Labs, commands, and scenarios
Test yourself
Quizzes and assignments
Apply on the job
Checklists and real-world workflows
Start here
Curated tutorials in this category
Hand-picked programs to begin with — each includes chapters, practice, and assessments where available.
SOC Analyst Foundation: Logs, Alerts and Incident Response
Core SOC workflows with labs, alert scenarios, and IR playbooks.
Includes: SOC labs · Checklists · IR scenarios
Start tutorialSecurity Monitoring with Wazuh, Splunk and ELK
Practical monitoring, detection rules, and investigation across major SIEM stacks.
Includes: Detection rules · SIEM labs · Dashboards
Start tutorialMore topics
Explore other tutorial categories
Jump between fundamentals, offensive security, blue team, cloud, compliance, and more.
Cybersecurity Fundamentals
Build your security foundation from zero
View categoryEthical Hacking
Learn responsible offensive security workflows
View categoryWeb Application Security
Attack and defend modern web applications
View categoryNetwork Security
Design, segment, and monitor secure networks
View categoryLinux Security
Harden Linux systems for production and audits
View categoryIncident Response
Respond to incidents with structure and evidence
View categoryCloud Security
Secure cloud workloads, IAM, and logging
View categoryDevSecOps
Embed security in CI/CD and cloud-native delivery
View categoryCompliance & GRC
Frameworks, controls, and audit-ready evidence
View categoryCryptography
Cryptography concepts for security professionals
View categorySecurity Tools
Use security tools effectively and responsibly
View categoryOutcomes
What you'll gain
- Triage alerts and investigate suspicious activity
- Use SIEM dashboards and detection logic
- Document incidents with clear timelines and evidence
- Progress from SOC basics to threat hunting tutorials
Topics
Skills & topic areas
Go deeper
Continue your learning path
Pair tutorials with structured roadmaps, hands-on labs, and related courses.
Ready to start learning?
Open the featured tutorial or browse the full catalog filtered for soc & blue team.