SOC Essentials S|CE

About Course

The SOC Essentials (S|CE) Series is designed for security professionals and freshers to enhance their skills and knowledge about essential security technologies. Focused on honing candidates with in-demand skills, the S|CE course will provide insights into security operations frameworks and related technologies that are required to master the foundational concepts of SOC.

In this program students will learn the basics of computer networks, TCP/IP model, OSI model, Windows/Linux/Unix security concepts, threats, vulnerabilities, and attack concepts in terms of cyber threats. Further, students will go through the complete SOC architecture: its importance, workflow, and processes of SOC.

Students will learn more advanced architectural concepts like SIEM architecture and deployment models, and data sources that are commonly used. Learn everything about Log Management like; dashboards, reports, and incident escalation in terms of dealing with real positive and false alerts. This course will also teach you sources, types, and lifecycle of threat intelligence and give an introduction to threat hunting as well while diving deep into incident response lifecycle processes. Put your newly acquired abilities to the test with an exhilarating Capture the Flag (CTF) Exercise seamlessly integrated in our Capstone project. This CTF is seamlessly integrated by live virtual machines, genuine software, and real networks, all delivered within a secure and regulated sandbox environment. With these exclusive hands-on, human-versus-machine CTF challenges you will develop the hands-on proficiencies essential for success in your cyber professional role. If you are looking to learn advanced SOC certification, click here: Certified SOC Analyst (C|SA)

Who is it for?

School students, graduates, professionals, career starters and changers, IT / Technology / Cybersecurity teams with little or no work experience.
Anyone who wants to start a career in cybersecurity and is interested in SOC.
This course is also helpful for IT professionals, SOC analysts, system security professionals, security engineers, threat management professionals, incident response teams, security administrators, vulnerability management professionals, and any cybersecurity professional.

Key Features

Engage in 6 lab practical exercises in every module to develop skills and understand how to secure cloud solutions.
Get access to 10+ hours of premium self-paced video training.
900+ pages of ecourseware.
Capstone Projects with Real-World CTF Challenges
Gain year-long access to courseware and 6-month access to labs.
Receive a proctored exam voucher with one-year validity.
Increase your value in the job market to advance your career.
Earn a globally recognized EC-Council certification.
Learn about network fundamentals, Windows and Unix/Linux Security, exploits, SOC architecture, SIEM development, and threat hunting.
Understand how to deal with alerts.

Exam Details

Training Details: Self-paced in-demand lecture videos led by world-class instructors and hands-on labs.
Pre-requisite: No prior cybersecurity knowledge or IT work experience required

Exam Code: 112-56
Number of Questions: 75
Exam Availability: EC-Council Exam Portal
Test Duration: 2 hours
Test Format: Multiple Choice

Learn the basics of computer networks
Deep dive into the Incident response lifecycle.
Dive deep into the cyber threat concepts like threats, vulnerabilities, and attacks.
Learn what log management is and its key parts, like events, logs, and incidents.
Understand advanced architectural concepts like SIEM architecture and deployment models.
Learn how you can perform centralized management of logs.
Discover the sources, types, and lifecycle of threat intelligence and get introduced to threat hunting.
Gain knowledge on dashboards, reports, and incident escalation in terms of dealing with real positive and false alerts.
Gain insights into the Security Operations Center (SOC) architecture and learn the importance, workflow, and processes of SOC.

Course Content

Module 2: Fundamentals Of Cyber Threats

Cyber Threats
Intent-Motive-Goal
Tactics-Techniques-Procedures
Opportunity-Vulnerability-Weakness
Vulnerability
Threats & Attacks
Example of Attacks
Network-Based Attacks
Application-Based Attacks
Host-Based Attacks
Insider Attacks
Malware
Phishing and Social Engineering

Module 3: Introduction To Security Operations Center

Module 4: SOC Components And Architecture

Key Components of a SOC
People in SOC
Process in SOC
Technologies in SOC
SOC Architecture and Infrastructure
Different Types of SOCs and Their Purposes
Introduction to SIEM
SIEM Architecture
SIEM Deployment Models
Data Sources in SIEM
SIEM Logs
Network in SIEM
Endpoint Data in SIEM

Module 5: Introduction To Log Management

Incident
Event
Log
Typical Log Sources
Need of Log
Typical Log Format
Local Log Management
Centralized Log Management
Logging Best Practices
Logging/Log Management Tools

Module 6: Incident Detection And Analysis

SIEM Use Case Development
Security Monitoring and Analysis
Correlation Rules
Dashboards
Reports
Alerting
Triaging Alerts
Dealing with False Positives Alerts
Incident Escalation
Communication Paths
Ticketing Systems

Module 7: Threat Intelligence And Hunting

Introduction to Threat Intelligence
Threat Intelligence Sources
Threat Intelligence Types
Threat Intelligence Lifecycle
Role of Threat Intelligence in SOC Operations
Threat Intelligence Feeds
Threat Intelligence Sharing and Collaboration
Threat Intelligence Tools/Platforms
Introduction to Threat Hunting
Threat Hunting Techniques
Threat Hunting Methodologies
Role of Threat Hunting in SOC Operations
Leveraging Threat Intelligence for Hunting
Threat Hunting Tools

Module 8: Incident Response And Handling

Student Ratings & Reviews

5.0

Total 1 Rating

1 Rating

0 Rating

4 months ago

The SOC Essentials certification course provided me with a solid foundation in security operations. It not only deepened my understanding of SIEM (Security Information and Event Management) tools but also introduced me to best practices in handling security incidents. This course is essential for anyone aspiring to work in a SOC environment.

About Course

What Will You Learn?

Course Content

Module 1: Computer Network And Security Fundamentals

TCP/IP Model

OSI Model

Types of a Network

Network Topologies

Network Hardware Components

TCP/IP Protocol Suite

Network Security Controls

Network Security Devices

Windows Security

Unix/Linux Security

Web Application Fundamentals

Information Security Standards, Laws, and Acts

Module 2: Fundamentals Of Cyber Threats

Cyber Threats

Intent-Motive-Goal

Tactics-Techniques-Procedures

Opportunity-Vulnerability-Weakness

Vulnerability

Threats & Attacks

Example of Attacks

Network-Based Attacks

Application-Based Attacks

Host-Based Attacks

Insider Attacks

Malware

Phishing and Social Engineering

Module 3: Introduction To Security Operations Center

What is a Security Operations Center (SOC)

Importance of SOC

SOC Team Roles and Responsibilities

SOC KPI

SOC Metrics

SOC Maturity Models

SOC Workflow and Processes

Challenges in Operating a SOC

Module 4: SOC Components And Architecture

Key Components of a SOC

People in SOC

Process in SOC

Technologies in SOC

SOC Architecture and Infrastructure

Different Types of SOCs and Their Purposes

Introduction to SIEM

SIEM Architecture

SIEM Deployment Models

Data Sources in SIEM

SIEM Logs

Network in SIEM

Endpoint Data in SIEM

Module 5: Introduction To Log Management

Incident

Event

Log

Typical Log Sources

Need of Log

Typical Log Format

Local Log Management

Centralized Log Management

Logging Best Practices

Logging/Log Management Tools

Module 6: Incident Detection And Analysis

SIEM Use Case Development

Security Monitoring and Analysis

Correlation Rules

Dashboards

Reports

Alerting

Triaging Alerts

Dealing with False Positives Alerts

Incident Escalation

Communication Paths

Ticketing Systems

Module 7: Threat Intelligence And Hunting

Introduction to Threat Intelligence

Threat Intelligence Sources