Analyst will learn the foundations of cybersecurity defense with Foundational Security
Operations and Defensive Analysis (SOC-200), a course designed for job roles such as
Security Operations Center (SOC) Analysts and Threat Hunters. Learners gain hands-on
experience with a SIEM, identifying and assessing a variety of live, end-to-end attacks
against a number of different network architectures
After completing this course, Analyst will be able to understand:
- Introduction to SOC-200
- Attacker Methodology Introduction
- Windows Endpoint Introduction
- Windows Server Side Attacks
- Windows Client-Side Attacks
- Windows Privilege Escalation
- Windows Persistence
- Linux Endpoint Introduction
- Linux Server Side Attacks
- Linux Privilege Escalation
- Network Detections
- Antivirus Alerts and Evasion
- Network Evasion and Tunneling
- Active Directory Enumeration
- Windows Lateral Movement
- Active Directory Persistence
- SIEM Part One: Intro to ELK
- SIEM Part Two: Combining the Logs
- Trying Harder: The Labs