SOC Analyst: SIEM & Incident Response

Build entry-level SOC analyst skills with sample logs and a lab SIEM. Curriculum: 1) SOC roles, severity and escalation; 2) Windows and Linux log fundamentals; 3) SIEM searches, dashboards and alert triage; 4) IOC enrichment and threat-intelligence basics; 5) Phishing and suspicious-login investigation; 6) Incident timeline and evidence handling; 7) Containment, recovery and lessons learned; 8) Ticket writing, SLAs and handover; 9) Capstone incident report.

Prerequisites: Basic networking and operating systems. Level: Beginner to Intermediate.