SOC Analyst Strong Foundation Course for beginners

Build a foundation in security operations with real-time threat monitoring, network security, and threat intelligence; learn correlation rules and use cases for siem tools like Splunk and ArcSight.

Explore dynamic vs static IP addresses and how DHCP assigns addresses from ISPs. Understand how DNS resolves domain names to IPs using A records and DNS queries.

Explore network address translation and how private IPs map to public addresses, while learning how switches, routers, and OSI layers enable inter-subnet connectivity.

Explore the OSI model and how packets carry data across networks. Understand headers, source and destination addresses, ports, well-known ports, and TCP vs UDP.

Explore how tcp/udp transport, routers, and perimeter firewalls use ip addresses, ports, and acls to control access, route traffic, and log security events.

Explore how denial of service and distributed denial of service attacks (DDoS) flood networks, exhaust bandwidth and resources, and how botnets, TCP/UDP floods, malware, phishing, and brute-force attacks intersect.

Explore how firewalls, web application firewalls, and email gateways protect networks, DMZs, and data, while proxies and URL filtering defend against OWASP top ten attacks and phishing.

Analyze how proxy, firewall, and email gateway traffic are filtered and logged to support the SOC investigations, and compare antivirus real-time scanning, full-system scans, quarantines, and behavioral detection.

Explore core network security concepts and devices, including VPN and proxy use, firewalls, IDS/IPS, WAF, email gateway, endpoint antivirus, and DMZ architecture, with a focus on layered defense and compliance.

Learn how security information and event management (SIM) collects real-time logs from network and security devices, normalizes data, and enables correlation, alerting, and forensics and incident response.