SOC Analyst — career path

Learn

• CourseSOC for Blue Teams↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  11 sections · 21 lectures

  1. Training Overview 2
  2. Section : Introduction to Cyber Defense 2
  3. Section : Understanding Adversary Tactics 2
  4. Section : Roles and Responsibilities in Cyber Operations 1
  5. Section : Cyber Threat Landscape and Frameworks 2
  6. Section : Log Analysis and Threat Detection 2
  7. Section : Introduction to Malware Analysis 3
  8. Section : Malware Analysis Techniques and Tactics 2
  9. Section : Malware Analysis Process 1
  10. Section : Network and File-Based Malware Analysis 3
  11. Audio Version of Training 1
• CourseBlue Team Boot Camp: Defending Against Hackers↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  6 sections · 60 lectures

  1. Training Overview 2
  2. Section 1: Introduction 3
  3. Section 2: Risk Analysis and Threat Intelligence 6
  4. Section 3: Endpoint Security 26
  5. Section 4: Network Security 13
  6. Section 5: Log Aggregation and Correlation 10

Practise

• Infra LabsSecurity Operations Practitioner — 15 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Enforce Segmentation and Approved Access PathsLevel: Guided⏱Duration: 1 h
  • Harden a JumpBox for Secure AdministrationLevel: Guided⏱Duration: 1 h
  • Secure Privileged Access and Auditing in Active DirectoryLevel: Guided⏱Duration: 1 h
  • Establish a Windows Hardening and Security Logging BaselineLevel: Guided⏱Duration: 1 h
  • Reduce DVWA Exposure by Using Compensating ControlsLevel: Guided⏱Duration: 1 h
  • Implement TLS and Certificate Controls for a ServiceLevel: Guided⏱Duration: 1 h
  • Integrated Hardening Sprint A: Segment, Harden, and Secure ServicesLevel: Advanced⏱Duration: 1 h 30 min
  • Governance and Compliance Evidence CollectionLevel: Guided⏱Duration: 1 h
  • Prioritize Risks and Implement One RemediationLevel: Guided⏱Duration: 1 h
  • Threat Modeling to Controls: Identify Risks and Implement MitigationsLevel: Guided⏱Duration: 1 h
  • Establish centralized logging by onboarding hosts and validating monitoring readinessLevel: Guided⏱Duration: 1 h
  • Hunt Threats Using Intelligence and Rule-Based DetectionLevel: Guided⏱Duration: 1 h
  • Triage, Contain, and Automate Incident ResponseLevel: Guided⏱Duration: 1 h
  • Govern, Detect, Hunt, and Respond Through an Integrated Security Operations SprintLevel: Advanced⏱Duration: 1 h
  • Design, Defend, and Respond Across an End-to-End Security ArchitectureLevel: Expert⏱Duration: 1 h

Learn

• CourseSnort Intrusion Detection, Rule Writing, and PCAP Analysis↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  3 sections · 16 lectures

  1. Training Overview 2
  2. Lectures 1
  3. Hands-on Labs 13

Practise

• LabsNetwork Forensics — 15 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze Browser-based Heap Spray Attack⏱Duration: 1 h
  • Automated in-Depth Packet Decoding⏱Duration: 2 h
  • Clonezilla Network⏱Duration: 1 h
  • Identifying Intrusion and Mitigating Attacks with RHEL Server⏱Duration: 1 h
  • Identifying Malicious Callbacks⏱Duration: 1 h
  • Identifying Malicious Network Connections⏱Duration: 1 h also on Step 6 (CySA+)
  • Incident Detection and Identification⏱Duration: 3 h
  • Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting)⏱Duration: 1 h
  • Parse Files Out of Network Traffic⏱Duration: 1 h also on Step 6 (CySA+)
  • Searching for Indicators of Compromise⏱Duration: 1 h also on Step 6 (CySA+)
  • Setting up Filters and Queries in Kibana⏱Duration: 1 h also on Step 6 (CySA+)
  • Use pfTop to Analyze Network Traffic⏱Duration: 1 h
  • Verify Attributes of Identified SilentBanker Intrusion⏱Duration: 1 h
  • Verify Attributes of Intrusion Through Additional Analysis⏱Duration: 1 h
  • Windows Event Log Manipulation via Windows Event Viewer⏱Duration: 1 h also on Step 2 (Security+) and Step 6 (CySA+)

Learn

• CourseChatGPT for SOC Analyst: Master Cyber Security with AI↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  7 sections · 59 lectures

  1. Training Overview 2
  2. A Sneek Peek into Cyber Security Mastery with ChatGPT 1
  3. Getting Started with ChatGPT for Cyber Security 17
  4. Advanced Prompts with ChatGPT 5 for Cyber Security Analyst 16
  5. Master Cloud Security with ChatGPT in Azure 11
  6. Enhance Incident Investigation with ChatGPT and SIEM Solution 11
  7. Audio Version of Training 1

Some labs here are not SIEM or EDR labs: the x86 buffer overflow, structured exception handler exploit, CTF environment and man-in-the-middle crypto attack labs are exploit and attack practice. The Microsoft Defender labs are the EDR practice, and the SIEM labs are on Step 6, the CySA+ step.

Practise

• Infra LabsMicrosoft Defender — 9 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Working with Microsoft Defender Products [Prerequisite Lab]Level: Prerequisite⏱Duration: 1 h
  • Introduction to Microsoft Defender OverviewLevel: Guided⏱Duration: 30 min
  • Microsoft Defender for Identity SetupLevel: Guided⏱Duration: 1 h
  • Microsoft Defender for EndpointLevel: Guided⏱Duration: 45 min
  • Comprehensive Security Management with Microsoft Defender and Entra IDLevel: Advanced⏱Duration: 45 min
  • Microsoft Defender for Office 365Level: Guided⏱Duration: 30 min
  • Microsoft Defender for Cloud AppsLevel: Guided⏱Duration: 30 min
  • Advanced Threat Hunting with Microsoft 365 DefenderLevel: Guided⏱Duration: 1 h
  • Incident Response with Microsoft Defender XDRLevel: Expert⏱Duration: 1 h 30 min
• LabsRootkits & Threat Detection — 12 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze Structured Exception Handler Buffer Overflow Exploit⏱Duration: 1 h
  • Creating a Case in FTK⏱Duration: 2 h
  • CTF Environment⏱Duration: 8 h
  • Detect Unauthorized Changes by Comparing to Approved Configurations⏱Duration: 2 h
  • Identify Rootkit and DLL Injection Activity⏱Duration: 1 h
  • Identifying Anomalous ARP⏱Duration: 1 h
  • Man In the Middle Crypto Attack⏱Duration: 1 h
  • Personal Security Products⏱Duration: 1 h
  • Snort Signatures, IDS Tuning, and Blocking⏱Duration: 1 h
  • Whitelisting & Suspicious File Verification⏱Duration: 2 h
  • x86 Buffer Overflows - Part 1⏱Duration: 3 h
  • x86 Buffer Overflows - Part 2⏱Duration: 3 h

Learn

• CourseDigital Forensics for Pentesters - Hands-on Learning↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  18 sections · 67 lectures

  1. Training Overview 2
  2. Course Overview 1
  3. Building Your Forensics Lab Environment Using VirtualBox 6
  4. New Course Content 6
  5. Troubleshooting VirtualBox 2
  6. Introduction to Autopsy 4
  7. Kali forensic Mode 4
  8. CSI Linux Investigator 3
  9. Digital Forensics Case Management 1
  10. Open-source intelligence (OSINT) 3
  11. Using Shodan to Search for Vulnerable devices 3
  12. Computer Forensics 9
  13. Reverse Engineering and Malware Analysis 5
  14. Malware Hunting with Sysinternal Tools 3
  15. Stenography 2
  16. Network forensics Using Wireshark 7
  17. Practice What You learned 5
  18. Audio Version of Training 1

Practise

• LabsForensic Investigations and Evidence Handling — 13 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze and Update a Company BCP/BIA/DRP/CIRP⏱Duration: 2 h also on Step 6 (CySA+)
  • Analyze Packed Executable to Identify Attack Vector and Payload⏱Duration: 1 h
  • BCP DRP and Test Planning⏱Duration: 2 h also on Step 2 (Security+)
  • Creating a Case in Autopsy⏱Duration: 2 h
  • Creating a Case in OSF⏱Duration: 1 h
  • Creation of BCP and DRP⏱Duration: 3 h also on Step 2 (Security+)
  • FTK Analysis & Reporting⏱Duration: 1 h
  • FTK Enterprise Fundamentals and Mobile Investigation⏱Duration: 2 h
  • Metadata Extraction Lab⏱Duration: 1 h
  • Open Source Password Cracking⏱Duration: 1 h also on Step 2 (Security+) and Step 6 (CySA+)
  • Password Cracking with PRTK⏱Duration: 2 h
  • Registry Analysis⏱Duration: 2 h
  • Virtualization⏱Duration: 1 h

Learn

• CourseIntroduction to Malware Analysis for Incident Responders↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  7 sections · 24 lectures

  1. Training Overview 2
  2. Introduction 1
  3. Malware Concepts: Building a solid foundation upon which to learn 4
  4. Malware Analysis: Foundational concepts before begin working with malware 3
  5. Setting Up the Analysis Environment (FlareVM) 5
  6. Conducting the Analysis 8
  7. Conclusion 1

Practise

• LabsMalware Analysis & Reverse Engineering — 18 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Advanced Techniques for Malware Recovery⏱Duration: 1 h also on Step 6 (CySA+)
  • Analysis and Recommendation Report⏱Duration: 1 h also on Step 6 (CySA+)
  • Analyze and Classify Malware⏱Duration: 1 h also on Step 6 (CySA+)
  • Analyze DoomJuice Infection to Identify Attack Vector and Payload⏱Duration: 1 h
  • Analyze Malicious Activity in Memory Using Volatility⏱Duration: 1 h
  • Conduct Root Cause Analysis for System Crashes⏱Duration: 1 h also on Step 6 (CySA+)
  • Detect Embedded Shellcode in a Microsoft Office Document⏱Duration: 1 h
  • Dynamic Malware Analysis⏱Duration: 1 h also on Step 6 (CySA+)
  • Fundamentals of Malware Analysis
  • Linux Analysis⏱Duration: 1 h
  • Log Analysis⏱Duration: 1 h also on Step 6 (CySA+)
  • MAC Analysis⏱Duration: 1 h
  • Practical Malware Analysis Labs
  • Recover from Incident⏱Duration: 2 h also on Step 6 (CySA+)
  • Remove Trojan⏱Duration: 1 h
  • Reverse Engineering Malware
  • RootKit⏱Duration: 2 h
  • Validate Indications of Compromise: Analysis of PE File⏱Duration: 1 h also on Step 6 (CySA+)