Module 1: Introduction to Cybersecurity & SOC

• Fundamentals of cybersecurity

• Role and structure of a Security Operations Center (SOC)

• SOC tiers and responsibilities

• Overview of cyber kill chain and attack lifecycle

Module 2: Networking Essentials for SOC Analysts

• Network protocols and services (TCP/IP, DNS, HTTP/S, etc.)

• Ports and protocols commonly targeted by attackers

• Packet analysis basics using Wireshark

Module 3: Security Information and Event Management (SIEM)

• Introduction to SIEM tools (e.g., Splunk, QRadar, ELK)

• Log sources: firewalls, endpoints, servers

• Use case creation and log correlation

• Real-time alert monitoring

Module 4: Threat Intelligence and Threat Hunting

• Understanding threat actors and indicators of compromise (IOCs)

• MITRE ATT&CK framework

• Threat hunting methodology and tools

• IOC enrichment and threat feeds

Module 5: Incident Detection and Response

• Types of security incidents (malware, phishing, DDoS, etc.)

• Alert triage and prioritization

• Steps in incident handling

• Use of playbooks in response actions

Module 6: Log Analysis and Correlation

• Parsing and analyzing logs

• Identifying suspicious behavior in logs

• Correlating logs from multiple sources

• Case studies of real-world attacks

Module 7: Endpoint and Malware Analysis (Basics)

• Understanding endpoint behavior

• Detecting malware execution and persistence techniques

• Basic static and dynamic malware analysis

Module 8: Reporting and Documentation

• Writing incident reports

• Documenting response actions and outcomes

• Communication within SOC and with external teams

Module 9: Compliance and Security Standards

• Overview of standards: ISO 27001, NIST, PCI-DSS

• Role of compliance in SOC

• Log retention policies and data privacy considerations

Module 10: Hands-On Labs and Real-Time Projects

• Simulated SOC environment

• Practical investigations and incident response drills

• Use of SIEM tools for live threat detection

• Mock interviews and resume assistance