Professional SOC & SIEM Course : Master Wazuh and Splunk

Name: Professional SOC & SIEM Course : Master Wazuh and Splunk
Rating: 4.2 (6 reviews)

Learn SIEM fundamentals, SOC operations, Wazuh, Splunk, log analysis, security monitoring, alerts and threat detection

Created byARUNNACHALAM SHANMUGARAAJAN

Last updated 10/2026

English

English [Auto],

What you'll learn

Install and configure Wazuh in a practical lab environment
Monitor Windows and Linux systems using Wazuh
Learn how to search and analyze security logs using Splunk
Understand how SIEM tools support incident detection and investigation

Course content

4 sections • 36 lectures • 1h 35m total length

INTRODUCTION TO SIEM0:22
Explore security information event management (SEM) basics for beginners and identify the core concepts behind SEM, including how SOC analysts use SEM in their day-to-day activities.
Class 2 : SIEM DEFINITION AND WHY ORGANISATION NEED SIEM2:25
Learn how security information and event management (siem) analyzes logs and events from Windows and Linux endpoints to detect suspicious activities and alert SOC analysts.
Class 3 : SIEM RESPONSE CYCLE AND CAPABILITIES OF SIEM3:01
Explore the siem response cycle and capabilities—collect data, convert to readable format, detect threats, analyze activities, and respond with real-time monitoring, dashboards, and it compliance.
Class 4 : SIEM CORE COMPONENT LOGS6:22
Master siem core component logs by collecting, standardizing, and correlating events from endpoints, servers, networks, and cloud to apply detection rules, detect threats, and generate alerts for analysts.
Class 5 : SIEM LOG COLLECTORS AND AGENT1:17
Class 6 : SIEM CORELATION AND DETECTION RULES1:48
Class 7 : SIEM ALERTS AND DASHBOARDS0:48
Class 8 : SIEM JOB ROLES0:51

Class 1 : Wazuh Introduction1:30
Learn to use VASU, an extended detection and response tool, for endpoint monitoring, threat detection, vulnerability management, file monitoring, log analysis, compliance, and active response.
Class 2 : XDR & EDR Differences1:41
Class 3 : What is Wazuh and Types of Endpoints1:37
Install Vasu, a free open source sem and xdr tool, to detect vulnerabilities and attacks, respond, and alert across Linux, Windows OS, cloud, and network, including AWS, Azure, Microsoft 365.
Class 4 : Wazuh Installation in Windows15:24
Class 5 : Wazuh Architecture2:23
Class 6 : Wazuh Agent and Vulnerability Detection3:05
Class 7 : Wazuh Indexer and Discover Dashboards2:31
Explore how the VASU indexer converts endpoint logs into readable data, and use DQL in the discover dashboard to search fields like source and decoder name for suspicious activity.
Class 8 : Wazuh Visualisation Dashboards0:52
Create and customize visualization dashboards using the Vasu dashboard to display events, desktops, alerts, and timelines with bar, pie, line, and histogram charts.
Class 9 : Wazuh Detection Rules1:35
Explore how Wazuh uses rules in its configuration file to detect brute force, failed logins, and hacking activities, generate alerts, and present readable results on the discover dashboard.
Class 10 : Wazuh Alerts and Report Option1:15
Learn how to configure Wazuh alerts and report options to notify via email, WhatsApp, Microsoft Teams, Slack, Chime, or custom webhooks, and download PDF or Word vulnerability reports for clients.
Class 11 : Wazuh Job Roles0:49

Class 1 : Splunk Introduction0:29
Explore Splunk basics in a beginner course, covering what Splunk is, its components, and core architecture concepts. Learn how to install Splunk on Windows with an accompanying video link.
Class 2 : Splunk Installation12:06
Class 3 : Splunk Concept2:17
Explore how Splunk functions as a SIEM to collect logs from Windows, Linux, and cloud endpoints, enabling SOC analysts to investigate suspicious activities and respond with containment.
Class 4 : Splunk Terminology1:22
Class 5 : Splunk Universal Forwarder3:16
Class 6 : Splunk Indexer2:49
Learn how the Splunk indexer converts unreadable forwarder data into readable, searchable structured logs, normalizing into field value paths and events to identify suspicious activities across hosts, IPs, and sources.
Class 7 : Splunk Search Head & Event Dashboard1:49
Class 8 : Splunk Search Processing Language ( SPL )4:36
Class 9 : Splunk Alert and Detection2:55
Class 10 : Splunk Job Roles0:27
Mastering Splunk opens opportunities as a SOC analyst and track hunter, or as a Splunk architect and admin with core certifications such as Splunk core certified user.

Requirements

Basic computer and networking knowledge

Description

Professional SOC & SIEM Course : Master Wazuh and Splunk

Welcome to the Complete SIEM Course: Master Wazuh & Splunk, a practical and beginner-friendly course designed to help you understand Security Information and Event Management (SIEM) and develop essential skills for security monitoring and SOC environments.

In today's cybersecurity landscape, organizations generate huge amounts of security logs and events from computers, servers, applications, networks, and security devices. SIEM platforms help security teams collect, analyze, correlate, visualize, and monitor this information to identify suspicious activity and potential security incidents.

In this course, you will explore two popular cybersecurity platforms, Wazuh and Splunk, and learn how SIEM technology can be used in real-world security operations.

You will begin with the fundamentals of SIEM and SOC operations and gradually move into practical security monitoring using Wazuh and Splunk.

What You Will Learn

• Understand the fundamentals of SIEM and Security Operations Centers (SOC)
• Learn how SIEM platforms collect and analyze security logs
• Understand the role of Wazuh and Splunk in cybersecurity
• Install and configure Wazuh in a practical lab environment
• Explore the Wazuh dashboard and security monitoring features
• Understand agents, log collection, alerts, and security events
• Monitor Windows and Linux systems using Wazuh
• Explore file integrity monitoring and security event analysis
• Understand vulnerability detection and security monitoring concepts
• Learn the fundamentals of Splunk Enterprise
• Understand Splunk indexes, searches, events, and dashboards
• Learn how to search and analyze security logs using Splunk
• Create useful security dashboards and visualizations
• Understand alerts and monitoring workflows
• Analyze authentication and system logs
• Learn practical log analysis and threat detection techniques
• Understand how SIEM tools support incident detection and investigation
• Explore basic SOC workflows and security monitoring practices
• Work with practical SIEM labs and cybersecurity scenarios

Start learning how modern security teams monitor systems, analyze security events, identify suspicious activity, and work with SIEM platforms.

Enroll now and begin your journey toward mastering Wazuh, Splunk, and SIEM!

Who this course is for:

Cybersecurity beginners

Professional SOC & SIEM Course : Master Wazuh and Splunk

What you'll learn

Explore related topics

Course content

COMPLETE SIEM COURSE : MASTER WAZUH & SPLUNK8 lectures • 17min

SECURITY OPERATIONS CENTER ( SOC )7 lectures • 14min

WAZUH - SIEM AND XDR TOOL11 lectures • 33min

SPLUNK SIEM TOOL10 lectures • 32min

Requirements

Description

Who this course is for: