Course

Certified SOC Foundation

Foundation-level SOC concepts, logs, monitoring basics.
Get Started
AU
Admin User
Course Instructor
Overview

Introduction to SOC & Core Security Concepts

Overview

Description:
This section introduces the Security Operations Center environment, SOC roles, monitoring workflows, and essential cybersecurity concepts. It provides a strong base for new learners entering security operations.

Topics Covered:

  • What is a SOC?

  • SOC team structure (Tier 1, 2, 3)

  • Attack lifecycle basics

  • Common cybersecurity terminology

  • Overview of security monitoring workflow

Activities:

  • 📘 Reading: "Understanding SOC & Its Importance"

  • 🎬 Intro Video Placeholder (5 mins)

  • 📝 Page: Essential Cyber Security Terms

  • ❓ Quiz: SOC Basics (10 MCQs)

Announcements
forum
Get access
Lessons

Log Sources, Events & Monitoring Fundamentals

Description:
In this section, learners explore the different types of log sources and how monitoring tools such as SIEM help in detection of threats.

Topics:

  • What are logs?

  • Types of logs (Windows, Linux, Firewall, Endpoint, App logs)

  • Event severity levels

  • Basic SIEM Architecture

  • Use cases: Login failures, user activity, suspicious behavior

Activities: 0

Basic Alert Handling & Incident Awareness

Description:
Covers how SOC analysts detect, verify, and handle basic alerts. Includes examples of common attack indicators.

Topics:

  • What is an alert?

  • True positive vs false positive

  • Basic triage steps

  • Common attack alerts (Brute force, malware, phishing)

  • How to escalate incidents

Activities: 0

Final Summary, Assessment & SOC Best Practices

Description:
Final wrap-up of the course, including SOC workflows, reporting standards, and best practices.

Topics:

  • SOC documentation

  • Escalation matrix overview

  • Communication skills for SOC analysts

  • Ethics in cybersecurity

Activities: 0