Booking options
£2,394
£2,394
Delivered Online
Intermediate level
Classroom based, instructor led workshop with proctor at home exam. The lab-intensive Certified SOC Analyst (CSA) program emphasizes the holistic approach to deliver the advanced knowledge of how to identify, validate and defend against cyber-attacks. The event is targeted at SOC Level 1 & Level 2 team members and their managers and those IT staff aspiring for a role in SOC.
The goal of this course is to help you master how to use SIEM and other SOC tools to identify and protect the business from cyber threats. Candidates will learn to perform enhanced threat detection using the predictive capabilities of Threat Intelligence. You walk out the door with skills needed to be an effective SOC response team member as well as the internationally recognized SOC Analyst certification!
This course fully prepares you for EC-Council Certified SOC Analyst exam 312-39.
Number of Questions: 100
Test Duration: 3 Hours
Test Format: Multiple Choice
Proctor at home exam is included in the online course
SOC processes, procedures, Technologies, and workflows.
Security threats, attacks & vulnerabilities
The cyber kill chain
Recognize attacker tools & tactics
Monitor and analyse logs and alerts
Centralized Log Management (CLM)
Log collection, monitoring, and analysis
SIEM solutions
Architecture & implementation
Fine tuning of SIEM solutions
Gain hands-on experience on SIEM use cases
Able to develop threat cases
SIEM Use cases
Plan, organize, and perform threat monitoring
Monitor emerging threat patterns
Perform security threat analysis
Gain hands-on experience in alert triaging process.
Threat intelligence
Enhanced incident detection and response
Gain knowledge of Incident Response Process
As the security landscape is expanding, a SOC team offers high quality IT-security services to actively detect potential cyber threats/attacks and quickly respond to security incidents. Organizations need skilled SOC Analysts who can serve as the front-line defenders, warning other professionals of emerging and present cyber threats.
All delegates must have strong TCP/IP networking skills, equivalent of CompTIA Network+. All delegate must have strong IT Systems administration experience, equivalent of CompTIA A+ and CompTIA Server+. It is recommended that delegates have fundamental security experience, equivalent of our CISMP programme.
3 Days classroom + 2 hours self-study each evening with proctor at home exam
If a date on our schedule does not suit you then please get in touch with us to discuss other course dates throughout the year.