What you'll learn

Malware behaviors

Attack analysis and interpretation from an analyst's perspective

Logging systems

Analysis using the MITRE ATT&CK framework

Attack analysis through event logs

PCAP Analysis

Anomaly detection in Firewall logs

Anomaly detection in DNS logs

Layer 1 Analyst

Requirements

Basic Computer Usage

Basic Network Information

Description

Our training content is primarily designed for individuals with basic computer skills. 90% of the training content is theoretical. The course begins with understanding what logging systems are and how they function. It aims to enable analysis and interpretation of attacks from an analyst's perspective by examining specific examples through the Mitre attack model, conveying the conclusions that can be drawn from logs.The training is intended for L1-level analysts.A security analyst analyzes potential threats and takes measures or writes reports for mitigating these threats. With the increasing number of cyberattacks in recent years, these attacks and their threats have become a more critical concern for companies, governments, and organizations. Security Operations Centers have started acting against these attacks by detecting and analyzing cybersecurity incidents.The Security Operations Center (SOC) is where an organization's security is continuously monitored, and it's responsible for analyzing security incidents. This team efficiently manages processes using technological solutions and ensures the detection and analysis of cybersecurity incidents.Cyber Security Operations Center Analyst - SOC Analyst - Security Operations Center Analyst - Cyber Security Analyst. CSOC Training: Defending Against Cyber Threats, Mastering CSOC Operations: Cybersecurity Essentials. Cyber Security Operations Center Analyst - SOC Analyst - Security Operations Center Analyst - Cyber Security Analyst. CSOC Training: Defending Against Cyber Threats, Mastering CSOC Operations: Cybersecurity Essentials.

Overview

Section 1: Log Management System

Lecture 1 Log Systems

Lecture 2 Microsoft Windows Event Viewer

Lecture 3 Event Logs GPO Audit

Lecture 4 Syslog - Rsyslog

Lecture 5 Linux Log - Apache Logs

Section 2: Defense Mechanisms

Lecture 6 Firewall

Lecture 7 IDS/IPS

Lecture 8 WAF - Web Application Firewall

Lecture 9 NAC - Network Access Control

Lecture 10 SIEM - Security Information and Event Management

Lecture 11 Endpoint Monitoring

SOC Analyst Tier 1,It is suitable for those who want to work in the field of Information Security Analyst.,It is suitable for those who want to become a Security Operation Center Analyst (SOC Analyst).,Suitable for those who want to become a Cyber ​​Security Analyst.