SOC Analyst & Blue Team
SOC Analyst & Blue Team
SIEM, triage, MITRE-informed investigations.
SOC roles, monitoring, SIEM concepts, threat intel, IR, EDR, hunting, and investigation scenarios with sanitized lab telemetry.
- Level
- Beginner
- Duration
- 10 weeks
- Modules
- 2 modules · 18 lessons
- Learning method
- Lessons + labs
What you will learn
- Triage alerts with clear notes
- Map activity to MITRE ATT&CK
- Outline an IR lifecycle response
Course curriculum
Expand each module for lessons, progress, and labs assigned to that module — not a flat topic dump.
Module 1
SOC foundations
Roles, monitoring, logs, SIEM vendors overview.
0/8 lessons
Module 1
SOC foundations
Roles, monitoring, logs, SIEM vendors overview.
0/8 lessons
Lessons
- 1. Introduction to Security Operations Centerspreview~20 min
- 2. SOC Analyst Roles~20 min
- 3. Security Monitoring~20 min
- 4. Log Analysis~20 min
- 5. SIEM Fundamentals~20 min
- 6. Splunk~20 min
- 7. IBM QRadar~20 min
- 8. Microsoft Sentinel~20 min
Enrol to unlock full lessons and track module progress.
Module 2
Detection & response
Intel, IR, malware/forensics intro, EDR, hunting, ATT&CK, scenarios.
0/10 lessons
Module 2
Detection & response
Intel, IR, malware/forensics intro, EDR, hunting, ATT&CK, scenarios.
0/10 lessons
Lessons
- 1. Threat Intelligence~20 min
- 2. Incident Detection~20 min
- 3. Incident Response~20 min
- 4. Malware Analysis Fundamentals~20 min
- 5. Digital Forensics Fundamentals~20 min
- 6. Endpoint Detection and Response~20 min
- 7. Threat Hunting~20 min
- 8. Security Alert Investigation~20 min
- 9. MITRE ATT&CK Framework~20 min
- 10. SOC Investigation Scenarios~20 min
Module labs
Enrol to unlock full lessons and track module progress.
OSINT in this course
Open-source intelligence is taught here — not only under Resources. Use authorized, public sources; no doxing or harassment; document sources and timestamps.
- Breach exposure awareness — Credential and email exposure checks for defensive notification workflows.
- Social media verification — Username/persona corroboration — never harassment or doxing.
- Image and media verification — Provenance, reverse search, and deepfake triage.
- Investigation documentation — Sources, timestamps, confidence, and remediation recommendations.
Inside this course
Labs · Quizzes · Certificate
Labs below are curated for this syllabus (shared engine, course-specific assignments). They unlock with enrol; quizzes match course topics; finish ≈90%+ to claim a CYNARKS Academy certificate.
Course labs
10 assigned labs · free with this course enrol
- Find the Noisy IPUnlock via course or plan
- Authentication Attack DetectionUnlock via course or plan
- Map the TechniqueUnlock via course or plan
- Write the Hunt IdeaUnlock via course or plan
- Sigma Detection IntentUnlock via course or plan
- IR Phase PickUnlock via course or plan
- Windows Event PickUnlock via course or plan
- YARA Rule MatchUnlock via course or plan
+2 more assigned
Track quiz
234 questions matched to this course topics
Knowledge checks for this track only — not a separate global quiz menu.
Start track quizCYNARKS certificate
Educational completion certificate · verify by ID
Your progress: 0% · enrol to unlock claim
Enrol in this course first.