Courses
SOC Analyst
Operate a modern SOC: SIEM, triage, detections, and case work.
Overview
You’ll learn to sift signal from noise, triage alerts, run investigations, and build detections mapped to ATT&CK.
Who is this for?
- Aspiring SOC Tier-1/2
- IT admins moving to blue team
- Graduates seeking first SOC role
Tools you’ll use
- Any popular SIEM
- Sysmon + EDR telemetry
- Sigma rules
- MITRE ATT&CK
Curriculum
Telemetry 101
Hands-on practice with feedback.
SIEM parsing & searches
Hands-on practice with feedback.
Alert triage & enrichment
Hands-on practice with feedback.
Investigation workflows
Hands-on practice with feedback.
Detections & Sigma
Hands-on practice with feedback.
Case management
Hands-on practice with feedback.
Prerequisites
- Basic networking concepts
- Comfort with logs & command-line
Outcomes
Rule writing confidence
Demonstrate this in your capstone.
Investigation muscle memory
Demonstrate this in your capstone.
Interview-ready portfolio
Demonstrate this in your capstone.
Schedule & Duration
| Mode | Duration | Details |
|---|---|---|
| Weekend cohort | 6 weeks | Project-focused sprints |
| Weekday cohort | 4 weeks | Evening classes + labs |
Pricing / Engagement
FAQs
Will I see real data?
We use realistic, anonymized datasets.
Which SIEMs?
We’re vendor-agnostic; principles transfer.