Security Operations Centre (SOC) Analyst Foundation

Module 1 - Security Management

• What is Security Operations
• Finding the sweet spot
• Security and Control
• Security Goals
• Reliability vs Security
• Typical Security Flaws

Module 2 - Incident Response & Continuity Management

• Incident Response vs Business Continuity
• Incident Response Plans
• Business Continuity Plans

Module 3 - Security Education

• Implementing Security Programmes

Module 4 - Security Information Event Management

• SIEM Processes & Architecture
• SIEM Features & Functions
• Security Auditing
• Event Definition
• Audit Logs - What to collect from Where
• Data Analysis

Module 5 - Vulnerability Management

• Vulnerability Management Process
• Vulnerability Scanning
• Remediation & Re-scanning

Module 6 - Threat Detection

• Intruder Behaviour
• IDS Systems
• Anomaly Detection
• HIDS & NIDS
• Open Source IDS
• Honeypots
• Advanced Threats

Module 7 - Security Assessments

• Penetration Testing
• Red Teams
• Scanning (NMap)
• Firewall & IDS Evasion
• Kali Linux
• Metasploit
• Meterpreter
• Hydra
• Social Engineering Toolkit

Module 8 - Simulated Attack - Defend - Attack

• Offensive Defence Tradecracft