Unit 1: Inside the SOC
Inside the SOC — Blue Shift.
1.1 What a SOC Actually Does
Labs
Course Content
1.2 Speaking Security & Prioritizing Risk
Labs
Course Content
1.3 Learning From the Headlines
Labs
Course Content
Unit 2: The Machines You Defend
The Machines You Defend — Blue Shift.
2.1 Machines & Data
Labs
Course Content
2.2 Virtualization, Cloud, Ports & Your Home Lab
Labs
Course Content
Unit 3: Networking for Defenders
Networking for Defenders — Blue Shift.
3.1 TCP/IP & Core Protocols
Labs
Course Content
3.2 Network Devices & Defenses
Labs
Course Content
3.3 Secure Protocols & Network Telemetry
Labs
Course Content
Unit 4: Operating Systems for Defenders (Linux + Windows)
Operating Systems for Defenders (Linux + Windows) — Blue Shift.
4.1 Linux for Analysts
Labs
Course Content
4.2 Windows for Analysts
Labs
Course Content
Unit 5: Security Monitoring & Telemetry
Security Monitoring & Telemetry — Blue Shift.
5.1 Endpoint & Identity Telemetry
Labs
Course Content
5.2 Network, Cloud & Mobile Telemetry
Labs
Course Content
5.3 Server & Web Telemetry
Labs
Course Content
Unit 6: SIEM Fundamentals & Detection Engineering
SIEM Fundamentals & Detection Engineering — Blue Shift.
6.1 How a SIEM Works
Labs
Course Content
6.2 Searching & Detecting
Labs
Course Content
Unit 7: Threat Frameworks & the Analyst Mindset
Threat Frameworks & the Analyst Mindset — Blue Shift.
7.1 Attacker Frameworks
Labs
Course Content
7.2 The Analyst Mindset
Labs
Course Content
Unit 8: Network Traffic Analysis & Intrusion Detection
Network Traffic Analysis & Intrusion Detection — Blue Shift.
8.1 Reading the Wire
Labs
Course Content
8.2 Detecting Intrusions
Labs
Course Content
Unit 9: Endpoint & Malware Analysis
Endpoint & Malware Analysis — Blue Shift.
9.1 Endpoint Investigation
Labs
Course Content
9.2 Malware Triage
Labs
Course Content
9.3 Automation for Analysts
Labs
Course Content
Unit 10: Email, Phishing & Web Attack Analysis
Email, Phishing & Web Attack Analysis — Blue Shift.
10.1 Phishing Analysis
Labs
Course Content
10.2 URL/Attachment Triage & Response
Labs
Course Content
10.3 Web Attacks from the Defender's View
Labs
Course Content
Unit 11: Threat Intelligence & Enrichment
Threat Intelligence & Enrichment — Blue Shift.
11.1 Understanding Threat Intel
Labs
Course Content
11.2 Enrichment & OSINT in Practice
Labs
Course Content
Unit 12: Incident Response, Forensics, Reporting & Career
Incident Response, Forensics, Reporting & Career — Blue Shift.
12.1 IR Lifecycle & Containment
Labs
Course Content
12.2 Forensics & the Report
Labs
Course Content
12.3 Operations, Ethics & Your Career
Labs
Course Content
Unit 13: Capstone — Operation Scarlet Vortex — Full-Scope Intrusion Investigation
Capstone — Operation Scarlet Vortex — Full-Scope Intrusion Investigation — Blue Shift.