Overview of Security Operations Center (SOC)

Roles and Responsibilities of SOC Teams

SOC Architecture and Components

Tier Levels (Tier 1, Tier 2, Tier 3) and Escalation Flow

Section Quiz

CIA Triad and Core Security Principles

Threats, Vulnerabilities, and Attacks

Cyber Kill Chain and MITRE ATT&CK Framework

Common Attack Vectors and Indicators of Compromise (IoCs)

Section Quiz

TCP/IP Model and OSI Layers

Common Network Devices and Topologies

IP Addressing, DNS, DHCP, and ARP

Understanding Firewalls, Routers, and Switches

Network Traffic Analysis Basics

Section Quiz

Understanding the Incident Lifecycle

Triage and Categorization of Security Events

Initial Investigation Steps and Prioritization

Working with Alerts and Escalations

Case Management and Ticketing Systems

Section Quiz

Types and Sources of Threat Intelligence

Open Source Intelligence (OSINT) Tools

Identifying IoCs: IPs, URLs, Hashes, Domains

Using Threat Feeds and Databases

Endpoint Security Overview

Understanding Malware Behavior (Ransomware, Trojans, Worms)

Basic Malware Detection Techniques

Using EDR Tools (Endpoint Detection & Response)

Windows Event Logs (Security, System, Application)

Linux and Firewall Logs

Email and Web Logs

Hands-on Log Investigation Exercises

Stages of Incident Response (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned)

SOC Tier 1 Role in IR

Escalation Procedures and Communication

Working with Tier 2 and Incident Response Teams

Importance of Accurate Documentation

Creating Incident Reports

Communication during Security Incidents

Best Practices for SOC Shift Handover

SIEM Platforms

Packet Capture Tools (Wireshark, tcpdump)

Threat Intelligence Platforms

Endpoint Monitoring Tools

Ticketing and Case Management Systems

Log Analysis Lab

Phishing Email Analysis Exercise

Network Monitoring Lab

SOC Case Escalation Drill lab

Final Exam