Learning path
Threat Detection and Incident Response Essentials
Skill Level
Fundamentals
Duration 9 hours 10 minutes
Updated Jan 28, 2025
About this learning path
As cyber threats grow increasingly sophisticated, the need for skilled SOC Analysts has never been greater. This learning path follows Samantha, a SOC operator, as she embarks on a journey to acquire the skills and analytical mindset of a SOC analyst. Each module immerses learners in real-world SOC scenarios, blending theory with hands-on practice, to prepare them for today's dynamic cybersecurity landscape.
Your instructors
Kendall AhernWorld Wide TechnologySolutions Development Intern
Shoaib Mohammed ShahapuriWorld Wide TechnologyTechnical Solutions Architect
Prerequisites
- Basic Cybersecurity Knowledge: Familiarity with cybersecurity concepts, including understanding of common cyber threats, basic networking principles, and common attack vectors.
- Experience in IT/SOC Operations: Experience with monitoring or working within a Security Operations Center (SOC) is helpful but not required.
- Interest in Security Tools: Comfort navigating security tools and logs, particularly in environments like Splunk, will be beneficial for hands-on labs.
What you'll learn
- Foundations of Threat Detection: Understand the role of threat detection within a SOC, the lifecycle of incident response, and key security terms and concepts.
- SIEM Fundamentals and Setup: Gain knowledge of SIEM architecture, learn to set up a basic SIEM instance, and understand how log management and event correlation help detect threats.
- Incident Response Planning and Execution: Learn the stages of an effective incident response, from preparation to post-incident review, and understand how to create and maintain an actionable Incident Response Plan.
- Hands-On Skills in Real-World Threat Detection: Engage in practical labs that simulate real-world scenarios, using tools like Splunk to collect, analyze, and respond to security incidents. Learn how to identify, isolate, and contain threats through simulated incidents.