Course · NCSA

NSD Certified SOC Analyst

Triage, hunt and respond: the job of a modern SOC.

A course by the Cybersecurity & AI Initiative, an ISAC Foundation centre.

Length
85 hours
Format
E-learning videos with hands-on virtual labs; advanced training on request for groups of 10 or more
Certification
Listed in the National Security Database at Falcon level; two attempts to pass
Before you start
NCBIS and NCPT recommended

About the course

A job-oriented certification for a career in security operations. It focuses on triage and root-cause analysis, threat hunting and using threat intelligence to detect attacks, and covers SOAR, UEBA and hands-on event-log analysis.

What you become

A SOC analyst listed in the National Security Database at Falcon level.

Who it is for

  • Security researchers
  • Students and professionals keen on security operations
  • Security teams
  • Law-enforcement agencies
  • Military and police personnel

Curriculum

  1. Modern security architecture

    attack trends, modern SOC architecture, SOC roles

  2. Defensible network security architecture

  3. Network security monitoring

    data collection, indicators of compromise, signatures

  4. Endpoint security architecture

    EDR strategy and hunting for IOCs

  5. Automation and continuous security monitoring

  6. Hands-on

    detecting malware through Windows event logs

  7. Hands-on case studies in virtual labs

  8. Triage and analysis

    alert prioritisation and validation

  9. Practical threat hunting

    abnormal activity and unknown attacks

  10. SOC components

    SIEM, threat intelligence, SOAR, EDR, UEBA

  11. People, process and technology challenges in the SOC

  12. SOC daily operations and management

What is included

  • 60 days of e-learning and Cyberange virtual labs
  • Tools: SIEM, EDR, SOAR, UEBA

Enrol

Send an enquiry to the Cybersecurity & AI Initiative from this page.