$170

Skill Boost Courses

H | SOC
SOC Analyst

Hackinetix Academy’s SOC Analyst – Job-Oriented Cybersecurity Program is designed for aspiring cybersecurity professionals who want to build the practical skills required for SOC Analyst L1/L2 roles. This hands-on training focuses on real-world Security Operations Center (SOC) workflows, enabling students to monitor security events, investigate alerts, detect threats, and respond to cyber incidents using industry-standard tools.

The program covers SIEM technologies, Windows & Linux log analysis, network security monitoring, EDR investigation, threat intelligence, MITRE ATT&CK, phishing analysis, malware triage, and incident response. Students will work on realistic attack scenarios, analyze security logs, perform alert triage, and create professional incident reports that reflect day-to-day SOC operations.

By the end of the course, learners will be confident in identifying Indicators of Compromise (IOCs), conducting threat hunting, correlating security events, and handling real-world cyber incidents in an enterprise environment.

What You’ll Learn

  • Security Operations Center (SOC) fundamentals

  • Splunk & Microsoft Sentinel (SIEM)

  • Windows & Linux log analysis

  • Network traffic and firewall log monitoring

  • Endpoint Detection & Response (EDR)

  • Threat Intelligence & IOC investigation

  • MITRE ATT&CK framework

  • Phishing and email security analysis

  • Malware investigation & alert triage

  • Incident response & threat hunting

  • Professional SOC reporting and documentation

Career Opportunities

After completing this program, learners can apply for roles such as:

  • SOC Analyst (L1 / L2)

  • Security Operations Analyst

  • SIEM Analyst

  • Threat Detection Analyst

  • Incident Response Analyst

  • Cybersecurity Monitoring Analyst

Eligibility Criteria

Hackinetix Academy’s SOC Analyst – Job-Oriented Cybersecurity Program is suitable for learners who have a basic understanding of computers and networking and want to build a career in Security Operations.

  • Basic knowledge of Computer Fundamentals
  • Basic understanding of Networking concepts such as TCP/IP, DNS, HTTP/HTTPS, and common ports
  • Familiarity with Windows and Linux operating systems
  • Basic command-line knowledge is recommended
  • Basic understanding of cybersecurity concepts is an advantage
  • Suitable for Cybersecurity students, IT professionals, fresh graduates, and career switchers
  • No prior professional SOC experience is required
  • Willingness to learn through hands-on labs and real-world security scenarios

Recommended: Students should have access to a laptop/PC capable of running cybersecurity lab environments.

 MODULE 1: SOC FUNDAMENTALS & SECURITY OPERATIONS

  • Introduction to Defensive Security
  • Introduction to SOC & Security Operations
  • People, Processes & Technology in a SOC
  • SOC Architecture & Security Teams
  • L1, L2 & L3 SOC Analyst Roles
  • Events, Alerts & Incidents
  • True Positive, False Positive & Benign Positive
  • Security Monitoring & Alert Triage
  • Severity, Priority & Escalation
  • SOC Analyst Investigation Mindset
  •  SOC Workflow & Incident Lifecycle
  • Hands-On Alert Classification Case Study

MODULE 2: NETWORKING FOR SOC ANALYSTS

  • TCP/IP & OSI Model for Security Monitoring
  • Public & Private IP Addresses
  • Source & Destination IP Addresses
  • Ports, Protocols & Network Services
  • TCP vs UDP
  • DNS, HTTP/HTTPS, SSH, FTP, SMTP & SMB
  • Firewalls, Proxies, VPN & NAT
  •  Network Connection Analysis
  • Normal vs Suspicious Network Activity
  • Common Network Attacks
  • Network Analysis from a SOC Perspective
  • Hands-On Network Command Demonstration

MODULE 3: WINDOWS SECURITY FUNDAMENTALS

  • Windows Security Architecture
  •  Local & Domain User Accounts
  • Windows Groups & Privileges
  •  Active Directory Fundamentals
  • Windows Processes & Services
  •  Windows Command Line Fundamentals
  •  PowerShell Fundamentals
  • Microsoft Defender Fundamentals
  • User & Process Monitoring
  • Windows Security from a SOC Perspective
  • Hands-On Windows Security Demonstration

MODULE 4: WINDOWS EVENT LOG ANALYSIS

  • Introduction to Windows Event Viewer
  • Security, System & Application Logs
  • Windows Event Logs & Event IDs
  • Successful & Failed Logon Events
  • Account Creation & Deletion Events
  • Group Membership Changes
  • Process Creation Events
  • PowerShell Logging
  • Detecting Brute Force & Suspicious Logins
  • Building an Authentication Timeline
  • Hands-On Windows Log Investigation

MODULE 5: LINUX SECURITY & LOG ANALYSIS

  • Linux Security Fundamentals
  • Linux Users, Groups & Permissions
  • Linux Filesystem Fundamentals
  • Processes, Services & Network Connections
  • Linux Command Line for SOC Analysts
  • Syslog & Journald
  • Authentication & SSH Logs
  • Detecting Failed Logins & Brute Force
  • Identifying Suspicious Processes
  • Hands-On Linux Log Investigation

MODULE 6: SIEM FUNDAMENTALS

  • Introduction to SIEM
  • SIEM Architecture & Components
  • Security Log Sources
  • Log Collection & Centralization
  • Log Parsing & Normalization
  • Events, Alerts & Correlation
  • Detection Rules & Use Cases
  • Dashboards & Security Monitoring
  • Alert Fatigue & False Positives
  • SIEM Investigation Workflow
  • Hands-On Log Correlation Exercise

MODULE 7: SPLUNK FOR SOC ANALYSTS

  • Splunk Architecture & Components
  • Indexes, Sources, Sourcetypes & Fields
  • Splunk Search Interface
  • SPL Fundamentals
  • Searching & Filtering Security Events
  • Time Range & Field Analysis
  • Statistical Analysis using SPL
  • Authentication & Network Log Analysis
  • Basic Correlation Searches
  • Alert Investigation using Splunk
  • Hands-On Splunk SOC Investigation

MODULE 8: MICROSOFT SENTINEL & KQL

  • Microsoft Sentinel Architecture
  • Log Analytics Workspace
  • Data Connectors & Log Sources
  • Sentinel Tables, Fields & Records
  • KQL Fundamentals
  • Searching & Filtering Security Events
  • Authentication Event Investigation
  • Analytics Rules & Incidents
  • Workbooks & Dashboards
  • Automation Rules & Playbooks
  • Hands-On KQL Investigation

MODULE 9: ENDPOINT MONITORING WITH SYSMON & PROCMON

  • Endpoint Security Fundamentals
  • Antivirus vs Endpoint Detection & Response
  • Endpoint Telemetry
  • Parent-Child Process Relationships
  • Command-Line Monitoring
  • PowerShell Activity Monitoring
  • Sysmon Event Analysis
  • Process Monitor Filtering
  • Process Explorer Fundamentals
  • Autoruns & Persistence Locations
  • Microsoft Defender Security Events
  • Hands-On Endpoint Investigation

MODULE 10: NETWORK SECURITY MONITORING

  • Network Security Monitoring Fundamentals
  • Packet & Connection Analysis
  • Wireshark Interface & Filters
  • DNS, TCP, ICMP & HTTP/S Traffic
  • Firewall Log Analysis
  • Proxy & VPN Log Analysis
  • IDS/IPS Fundamentals
  •  Port Scanning Indicators
  • Suspicious Network Connections
  • Command & Control Traffic Concepts
  • Data Exfiltration Indicators
  • Hands-On Network Traffic Investigation

MODULE 11: THREAT DETECTION & MITRE ATT&CK;

  • Threat Detection Fundamentals
  • Threat Actors, Tactics & Techniques
  • MITRE ATT&CK; Framework
  • Tactics, Techniques & Procedures
  • Initial Access & Execution
  • Persistence & Privilege Escalation
  • Defense Evasion & Credential Access
  • Discovery & Lateral Movement
  • Command & Control
  • Mapping Security Alerts to MITRE ATT&CK;
  • Hands-On ATT&CK; Mapping Exercise

MODULE 12: THREAT INTELLIGENCE & IOC ANALYSIS

  • Cyber Threat Intelligence Fundamentals
  • Strategic, Tactical & Operational Intelligence
  •  Indicators of Compromise
  • IP, Domain, URL & File Hash Analysis
  • IOC Enrichment
  • Reputation Analysis
  • Threat Intelligence Feeds
  • Threat Actor & Campaign Analysis
  • IOC vs IOA vs TTP
  • Limitations of IOC-Based Detection
  • Intelligence-Driven Threat Detection
  • Hands-On IOC Investigation

MODULE 13: PHISHING & EMAIL SECURITY ANALYSIS

  • Phishing & Social Engineering Fundamentals
  • Email Security Architecture
  • Email Header Analysis
  • Sender & Reply-To Verification
  • Domain & URL Investigation
  • SPF, DKIM & DMARC
  • Suspicious Link Analysis
  • Attachment Analysis Fundamentals
  • Credential Phishing Detection
  • Business Email Compromise
  • Phishing Verdict & Response Actions
  • Hands-On Phishing Investigation

MODULE 14: MALWARE ANALYSIS & TRIAGE

  • Malware Fundamentals & Classification
  • Malware Infection Lifecycle
  •  File Hash & Metadata Analysis
  • Static Analysis Fundamentals
  • Strings Analysis
  • Dynamic Analysis Concepts
  • Malware Sandbox Reports
  • Malware Indicators & IOCs
  • Persistence Indicators
  • Command & Control Indicators
  • Safe Malware Handling Procedures
  • Practical Malware Triager

MODULE 15: INCIDENT RESPONSE & ALERT TRIAGE

  • Incident Response Fundamentals
  • Alert Triage Methodology
  • Severity & Priority Classification
  • Initial Investigation
  •  Evidence Collection
  • Incident Timeline Creation
  • Containment, Eradication & Recovery
  • Root Cause Analysis
  • Escalation Procedures
  • Incident Closure
  • Post-Incident Review
  • Hands-On Alert Triage Case Study

MODULE 16: THREAT HUNTING FUNDAMENTALS

  • Threat Hunting Fundamentals
  • Reactive Investigation vs Proactive Hunting
  • Hypothesis-Driven Hunting
  •  IOC-Based Hunting
  • TTP-Based Hunting
  • Endpoint Threat Hunting
  • Network Threat Hunting
  • Authentication & Account Hunting
  • Persistence Detection
  • Lateral Movement Detection
  • MITRE ATT&CK-Based; Hunting
  • Practical Threat Hunting Exercise

MODULE 17: SOAR & SECURITY AUTOMATION

  • SOAR Fundamentals
  • Security Playbooks
  • Alert Enrichment & Automation
  • Automated IOC Investigation
  • Automated Ticket Creation
  • Phishing Response Automation
  • Threat Intelligence Integration
  •  Automated Incident Response
  • Human Approval in Automation
  • Automation Benefits & Risks
  • Building a Basic SOC Playbook

MODULE 18: VULNERABILITY & EXPOSURE MANAGEMENT

  • Vulnerability Management Fundamentals
  • CVE & CVSS
  • Asset Criticality & Business Impact
  • Vulnerability Severity vs Risk
  • Exploitability & Exposure
  • Risk-Based Vulnerability Prioritization
  • Patch Management Concepts
  • Vulnerability Intelligence
  • Correlating Vulnerabilities with Active Threats
  • SOC & Vulnerability Team Coordination
  • Practical Vulnerability Prioritization

MODULE 19: SOC REPORTING & PROFESSIONAL COMMUNICATION

  • SOC Documentation Standards
  • Alert Investigation Reports
  • Incident Investigation Reports
  • Executive Summary & Technical Findings
  • Evidence & Screenshot Documentation
  • Incident Timeline Documentation
  • Verdict, Severity & Business Impact
  • Containment & Remediation Recommendations
  • Incident Escalation Notes
  •  SOC Shift Handover
  • Communication with IT & Security Teams
  • Hands-On SOC Report Writing

MODULE 20: REAL-WORLD SOC SCENARIO LABS

  • Brute Force Attack Investigation
  • Suspicious Login Investigation
  • Account Compromise Investigation
  • Phishing Email Investigation
  • Suspicious PowerShell Investigation
  • Endpoint Alert Investigation
  • Network Traffic Investigation
  • Command & Control Detection
  • Malware Alert Triage
  • Incident Timeline Creation
  • Alert Verdict & Severity Classification
  • Escalation & Containment Decision

MODULE 21: CAPSTONE PROJECT – END-TO-END SOC INVESTIGATION

  • Security Alert Monitoring
  • Alert Triage & Prioritization
  • User, Device & IP Investigation
  • Log Analysis & Event Correlation
  • Threat Intelligence Enrichment
  • IOC Investigation
  • Incident Timeline Creation
  • MITRE ATT&CK; Mapping
  • Incident Severity Classification
  • Business Impact Assessment
  • Containment & Remediation Recommendations
  • Professional Incident Report
  • SOC Shift Handover
  • Final Investigation Presentation
Contact Us
Subscribe

All Access Membership

Dictum enim vel in consectetur arcu nunc habitasse mattis vitae accumsan, etiam ultrices eget non tincidunt.

Subscribe & Save

Powered by CookieAdmin