Foundational Security Operations and Defensive Analysis

Duration

SOC-200: Foundational Security Operations and Defensive Analysis

15 days (e-learning)

Overview

The Security Operations and Defensive Analysis (SOC-200) course delves into the foundations of defending networks and systems against cyber threats. Learners gain practical experience within a hands-on, self-paced environment designed to teach the fundamental concepts of SOC operations.

Individuals completing the online training course and passing its rigorous exam, earn the OffSec Defense Analyst (OSDA) certification. This SOC Analyst certification demonstrates your ability to detect, analyze, and assess a potential security incident through live exercises. The OSDA stands out in the cybersecurity field, reflecting a commitment to hands-on defensive skills sought after by employers.

Benefits

Upon completing SOC-200 and successfully passing the OSDA exam, you’ll have mastered core defensive methodologies, including:

• Security monitoring and log analysis
• Incident detection and threat identification
• Triaging and escalating events
• Incident response process and procedures
• Network and host-based forensics (basics)

About the exam

• The SOC-200 course and online lab prepares you for the OffSec Defense Analyst (OSDA) exam
• 23-hours and 45 minutes exam
• Proctored

Target Audience

The SOC-200 certification course is ideal for security professionals seeking to enhance their defensive analysis and response skills and earn the OSDA. It’s designed for individuals who have a solid foundation in networking and basic familiarity with Linux and Windows systems.

Prerequisites

While there are no formal prerequisites, it’s strongly recommended that you have:

• A solid foundation in TCP/IP networking
• Familiarity with Linux and Windows operating systems
• Basic understanding of cybersecurity concepts

Syllabus

• Attacker Methodology
• Windows Endpoint Introduction
• Windows Server Side Attacks
• Windows Client Side Attacks
• Windows Privilege Escalation
• Linux Endpoint Introduction
• Linux Server-Side Attacks
• Linux Privilege Escalation
• Windows Persistence
• Network Detections
• Antivirus Detections
• Active Directory Enumeration
• Network Evasion and Tunneling
• Windows Lateral Movement
• Active Directory Persistence
• SIEM Part One: Intro to ELK
• SIEM Part Two: Combining the Logs

Programme scope, delivery arrangements and suitability are confirmed during enquiry.