(SCTP Module) Security Operations Center (SOC) Essentials
About This Course
The Security Operations Center (SOC) Essentials module prepares learners to work effectively in a Security Operations Center (SOC) environment. The course covers the installation and configuration of Windows Server and domain services, as well as firewall and IDS/IPS systems. learners will learn to use Security Information and Event Management (SIEM) systems like ELK and Splunk for monitoring and alerting. The module also includes training on log analysis, using tools like Sysmon and YARA for event detection and threat hunting. By the end of this module, learners will have a comprehensive understanding of SOC operations and will be able to configure and manage security infrastructure, analyze events, and respond to incidents efficiently.
What You'll Learn
1. Acquire comprehensive knowledge on setting up and managing a Windows Domain using Sysmon for event logging and monitoring
2. Learn to install and configure Windows Server, manage Active Directory, and implement domain protocols
3. Learn to install and configure firewalls using pfSense, manage network traffic with NAT, and monitor real-time events with IDS/IPS systems like Snort
4. Master the use of Security Information and Event Management (SIEM) systems on ELK and Splunk to monitor events, create and optimize custom queries, and develop alert settings, enabling them to conduct detailed and effective data analyses and threat detection.
5. Explore advanced techniques in cybersecurity threat hunting, including log analysis, using Sysmon for event detection, and employing tools like YARA for signature writing.
Entry Requirements
Qualifications in Information and Digital Technologies, and/or Engineering at minimum ITE NITEC/Higher NITEC.