SOC Analyst — career path

Learn

• PathFollow the CompTIA Security+ (SY0-701) path — the entry certification for every blue-team role

Learn

• CourseSOC for Blue Teams 🔒 StationX Unlimited
  11 sections · 21 lectures

  1. Training Overview 2
  2. Section : Introduction to Cyber Defense 2
  3. Section : Understanding Adversary Tactics 2
  4. Section : Roles and Responsibilities in Cyber Operations 1
  5. Section : Cyber Threat Landscape and Frameworks 2
  6. Section : Log Analysis and Threat Detection 2
  7. Section : Introduction to Malware Analysis 3
  8. Section : Malware Analysis Techniques and Tactics 2
  9. Section : Malware Analysis Process 1
  10. Section : Network and File-Based Malware Analysis 3
  11. Audio Version of Training 1
• CourseBlue Team Boot Camp: Defending Against Hackers 🔒 StationX Unlimited
  6 sections · 60 lectures

  1. Training Overview 2
  2. Section 1: Introduction 3
  3. Section 2: Risk Analysis and Threat Intelligence 6
  4. Section 3: Endpoint Security 26
  5. Section 4: Network Security 13
  6. Section 5: Log Aggregation and Correlation 10

Practise

• Labs+Security Operations Practitioner — 15 labs 🔒 StationX Labs+
  • Design, Defend, and Respond Across an End-to-End Security Architecture [Expert]
  • Enforce Segmentation and Approved Access Paths [Guided]
  • Establish a Windows Hardening and Security Logging Baseline [Guided]
  • Establish centralized logging by onboarding hosts and validating monitoring readiness [Guided]
  • Govern, Detect, Hunt, and Respond Through an Integrated Security Operations Sprint [Advanced]
  • Governance and Compliance Evidence Collection [Guided]
  • Harden a JumpBox for Secure Administration [Guided]
  • Hunt Threats Using Intelligence and Rule-Based Detection [Guided]
  • Implement TLS and Certificate Controls for a Service [Guided]
  • Integrated Hardening Sprint A: Segment, Harden, and Secure Services [Advanced]
  • Prioritize Risks and Implement One Remediation [Guided]
  • Reduce DVWA Exposure by Using Compensating Controls [Guided]
  • Secure Privileged Access and Auditing in Active Directory [Guided]
  • Threat Modeling to Controls: Identify Risks and Implement Mitigations [Guided]
  • Triage, Contain, and Automate Incident Response [Guided]

Learn

• CourseMaster Wireshark 3 in 5 Days 🔒 StationX Unlimited
  6 sections · 34 lectures

  1. Training Overview 2
  2. Day One 3
  3. Day Two 8
  4. Day Three 7
  5. Day Four 7
  6. Day Five 7

Practise

• Labs+Introduction to Wireshark — 11 labs 🔒 StationX Labs+
  • Can You Customize Profiles and Filters in Wireshark? [Advanced]
  • Can You Display Customizations and Exploration of Captured Traffic by Using Wireshark? [Advanced]
  • Can You Explore the Varied Uses of Wireshark? [Expert]
  • Can You Extract Intercepted Files and Perform Password Attack Discovery? [Advanced]
  • Implement Wireshark [Guided]
  • Modify Display Filter Functionality [Guided]
  • Perform an Effective Capture [Guided]
  • Recreate Data Content [Guided]
  • Recreate Data Flows [Guided]
  • Use Display Filters [Guided]
  • Use Wireshark to Discover Evidence of Network Attacks [Guided]
• LabsNetwork Forensics — 15 labs 🔒 StationX Unlimited
  • Analyze Browser-based Heap Spray Attack
  • Automated in-Depth Packet Decoding
  • Clonezilla_Network
  • Identifying Intrusion and Mitigating Attacks with RHEL Server
  • Identifying Malicious Callbacks
  • Identifying Malicious Network Connections
  • Incident Detection and Identification
  • Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting)
  • Parse Files Out of Network Traffic
  • Searching for Indicators of Compromise
  • Setting up Filters and Queries in Kibana
  • Use pfTop to Analyze Network Traffic
  • Verify Attributes of Identified SilentBanker Intrusion
  • Verify Attributes of Intrusion Through Additional Analysis
  • Windows Event Log Manipulation via Windows Event Viewer

Learn

• CourseChatGPT for SOC Analyst: Master Cyber Security with AI 🔒 StationX Unlimited
  7 sections · 59 lectures

  1. Training Overview 2
  2. A Sneek Peek into Cyber Security Mastery with ChatGPT 1
  3. Getting Started with ChatGPT for Cyber Security 17
  4. Advanced Prompts with ChatGPT 5 for Cyber Security Analyst 16
  5. Master Cloud Security with ChatGPT in Azure 11
  6. Enhance Incident Investigation with ChatGPT and SIEM Solution 11
  7. Audio Version of Training 1

Practise

• LabsRootkits & Threat Detection — 12 labs 🔒 StationX Unlimited
  • Analyze Structured Exception Handler Buffer Overflow Exploit
  • CTF Environment
  • Creating a Case in FTK
  • Detect Unauthorized Changes by Comparing to Approved Configurations
  • Identify Rootkit and DLL Injection Activity
  • Identifying Anomalous ARP
  • Man In the Middle Crypto Attack
  • Personal Security Products
  • Snort Signatures, IDS Tuning, and Blocking
  • Whitelisting & Suspicious File Verification
  • x86 Buffer Overflows - Part 1
  • x86 Buffer Overflows - Part 2

Learn

• PathFollow the CompTIA CySA+ (CS0-003) path — the intelligence, SIEM and incident-response labs live on this path

Learn

• CourseDigital Forensics for Pentesters - Hands-on Learning 🔒 StationX Unlimited
  18 sections · 67 lectures

  1. Training Overview 2
  2. Course Overview 1
  3. Building Your Forensics Lab Environment Using VirtualBox 6
  4. New Course Content 6
  5. Troubleshooting VirtualBox 2
  6. Introduction to Autopsy 4
  7. Kali forensic Mode 4
  8. CSI Linux Investigator 3
  9. Digital Forensics Case Management 1
  10. Open-source intelligence (OSINT) 3
  11. Using Shodan to Search for Vulnerable devices 3
  12. Computer Forensics 9
  13. Reverse Engineering and Malware Analysis 5
  14. Malware Hunting with Sysinternal Tools 3
  15. Stenography 2
  16. Network forensics Using Wireshark 7
  17. Practice What You learned 5
  18. Audio Version of Training 1

Practise

• LabsForensic Investigations and Evidence Handling — 13 labs 🔒 StationX Unlimited
  • Analyze Packed Executable to Identify Attack Vector and Payload
  • Analyze and Update a Company BCP/BIA/DRP/CIRP
  • BCP DRP and Test Planning
  • Creating a Case in Autopsy
  • Creating a Case in OSF
  • Creation of BCP and DRP
  • FTK Analysis & Reporting
  • FTK Enterprise Fundamentals and Mobile Investigation
  • Metadata Extraction Lab
  • Open Source Password Cracking
  • Password Cracking with PRTK
  • Registry Analysis
  • Virtualization
• LabsCyber Defense Forensics Analyst Training Series — 70 labs 🔒 StationX Unlimited
  • Analyze Malicious Network Traffic
  • Auditing Service Accounts
  • Auditing Service Accounts and Setting Up Automated Log Collection
  • Baseline Systems in Accordance with Policy Documentation
  • Conduct Root Cause Analysis for System Crashes
  • Conduct Supplemental Monitoring
  • Control Assessment and Evaluation
  • Creating a Baseline Using Autopsy
  • Creating a Case in FTK
  • Creating a Forensic Image
  • Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server
  • Cryptography: Steganography
  • Cryptography: Using GPG for Encryption and Key Management
  • Data Backup to Prep for Recovery
  • Data Recovery with Autopsy
  • Denial of Service PCAP Analysis
  • Dynamic Malware Analysis
  • Event Log Collection with Splunk
  • Hash Verification
  • Host Identification Scanning via Windows
  • Host Identification Scanning with Linux
  • Identify Access to a LINUX Firewall Through SYSLOG Service
  • Implement Single System Changes in Firewall
  • Import Nexpose Vulnerability Data into QRadar
  • Intro to Linux - Routing and SSH Tunnels
  • Introduction to Squert
  • LNX101 - OpenSSH Installation, Configuration, and Hardening
  • LNX101 - Setting Up a Firewall With UFW and Firewalld
  • LNX101 - Telnet vs. SSH
  • Lab Environment Orientation - *** (Start Here!) ***
  • Live Imaging with FTK Imager Lite
  • Log Event Reports
  • Manual Vulnerability Assessment
  • Manually Analyze Malicious PDF Documents
  • Manually Analyze Malicious PDF Documents 2
  • Manually Creating a Baseline with MD5Deep
  • Memory Extraction and Analysis
  • Nessus Scanning and Reporting
  • Nexpose: Blue Team Remediation
  • Overview of Kibana
  • PAM Lab
  • Parse Files Out of Network Traffic
  • Participate in Attack Analysis Using Trusted Tool Set
  • Patching With WSUS
  • Pentesting & Network Exploitation - Linux Target Analysis Labs
  • Preliminary Scanning
  • Protect Against Beaconing
  • Recover from Incident
  • Recovery From Inadequate Patching
  • Registry Analysis
  • Rogue Device Identification and Blocking
  • Scanning From Windows
  • Scanning with Nmap
  • Securing Linux - Firewalls
  • Securing Linux for System Administrators
  • Setting up Filters and Queries in Kibana
  • Snap Exploit
  • Snort Signatures, IDS Tuning, and Blocking
  • Specialized Linux Port Scans
  • Threat Designation
  • Tweaking Firewall Rules for Detection
  • Use pfTop to Analyze Network Traffic
  • Using Snort and Wireshark to Analyze Traffic
  • Validate Indications of Compromise: Analysis of PE File
  • WebApp Attack PCAP Analysis
  • Whitelist IP Address from IDS Alerts
  • Windows Event Log Manipulation via Windows Event Viewer
  • Windows System Hardening with Group Policy & Active Directory
  • Windows System Hardening with PowerShell
  • Wireshark

Learn

• CourseIntroduction to Malware Analysis for Incident Responders 🔒 StationX Unlimited
  7 sections · 24 lectures

  1. Training Overview 2
  2. Introduction 1
  3. Malware Concepts: Building a solid foundation upon which to learn 4
  4. Malware Analysis: Foundational concepts before begin working with malware 3
  5. Setting Up the Analysis Environment (FlareVM) 5
  6. Conducting the Analysis 8
  7. Conclusion 1

Practise

• LabsMalware Analysis & Reverse Engineering — 18 labs 🔒 StationX Unlimited
  • Advanced Techniques for Malware Recovery
  • Analysis and Recommendation Report
  • Analyze DoomJuice Infection to Identify Attack Vector and Payload
  • Analyze Malicious Activity in Memory Using Volatility
  • Analyze and Classify Malware
  • Conduct Root Cause Analysis for System Crashes
  • Detect Embedded Shellcode in a Microsoft Office Document
  • Dynamic Malware Analysis
  • Fundamentals of Malware Analysis
  • Linux Analysis
  • Log Analysis
  • MAC Analysis
  • Practical Malware Analysis Labs
  • Recover from Incident
  • Remove Trojan
  • Reverse Engineering Malware
  • RootKit
  • Validate Indications of Compromise: Analysis of PE File