Cybersecurity — Intermediate
- Intermediate
- 6 months, 5–8 hrs/week
32 USDper month
You understand networks, attacks and scripting. Now practise the job of a SOC analyst: search logs in a SIEM, work out which alerts are real, and take an incident from the first alert to the written report.
- SIEM
- EDR
- Alert triage
- Incident response
Phase 1
Logs & SIEM
Windows, Linux and network logs, and the queries that search them in a SIEM.
Phase 2
Alert triage
Phishing, malware and suspicious logins in an EDR: real threats versus noise.
Phase 3
Incident response
Containing an attack, when to escalate, playbooks, and clear ticket notes.
Phase 4
Capstone
Work a simulated attack from first alert to incident report.