دوره SOC-200: Foundational Security Operations and Defensive Analysis

Learn the foundations of cybersecurity defense with Foundational Security Operations and Defensive Analysis (SOC-200), a course designed for job roles such as Security Operations Center (SOC) Analysts and Threat Hunters. Learners gain hands-on experience with a SIEM, identifying and assessing a variety of live, end-to-end attacks against a number of different network architectures. Learners who complete the course and pass the exam earn the OffSec Defense Analyst (OSDA) certification, demonstrating their ability to detect and assess security incidents.

Syllabus

  1. Attacker Methodology Introduction
  2. Windows Endpoint Introduction
  3. Windows Server Side Attacks
  4. Windows Client-Side Attacks
  5. Windows Privilege Escalation
  6. Windows Persistence
  7. Linux Endpoint Introduction
  8. Linux Server Side Attacks
  9. Network Detections
  10. Antivirus Alerts and Evasion
  11. Network Evasion and Tunneling
  12. Active Directory Enumeration
  13. Windows Lateral Movement
  14. Active Directory Persistence
  15. SIEM Part One: Intro to ELK
  16. SIEM Part Two: Combining the Logs

SOC-200: Foundational Security Operations and Defensive Analysis