SIEM (SOC Analyst)
Course Index
40 Lessons · 4 Levels
Master SIEM and SOC operations — log analysis, detection rules, MITRE ATT&CK, incident response, Splunk, Microsoft Sentinel and real-world threat hunting.
40Lessons
4Levels
1Project
FreeAccess
Level I
SIEM & SOC Fundamentals
Lessons 1–8
Level II
Log Management & Detection
Lessons 9–18
Lesson 09
Log Collection and Normalization
Lesson 10
Parsing and Field Extraction
Lesson 11
Event Correlation Basics
Lesson 12
Detection Logic and Rule Writing
Lesson 13
Threshold vs Behavioral Detection
Lesson 14
Alert Tuning and Noise Reduction
Lesson 15
MITRE ATT&CK Framework Overview
Lesson 16
Mapping Use Cases to MITRE
Lesson 17
SIEM Dashboards and Visualizations
Lesson 18
Detection Best Practices
Level III
Incident Response & SOC Operations
Lessons 19–30
Lesson 19
Alert Investigation Workflow
Lesson 20
Incident Classification and Prioritization
Lesson 21
False Positives and True Positives
Lesson 22
Threat Intelligence Integration
Lesson 23
IOC Management
Lesson 24
Case Management in SOC
Lesson 25
Incident Response Lifecycle
Lesson 26
Containment and Mitigation Actions
Lesson 27
Root Cause Analysis
Lesson 28
Reporting and Documentation
Lesson 29
SOC Metrics and KPIs
Lesson 30
Shift Handover and Escalation
Level IV
SIEM Tools & Real-World Practice
Lessons 31–40
Lesson 31
SIEM Tools Overview
Lesson 32
Splunk Fundamentals
Lesson 33
Elastic SIEM Overview
Lesson 34
Microsoft Sentinel Basics
Lesson 35
Log Analysis Hands-On
Lesson 36
Writing Real-World Detection Use Cases
Lesson 37
Threat Hunting Basics
Lesson 38
Automation and SOAR Introduction
Lesson 39
SIEM Best Practices Checklist
Lesson 40
Mini Project – SOC Investigation