Practical SOC T1-T2 Preparation Course

Cybersecurity SOC Analyst. Phishing, Malware Analysis, Networks, Windows, Linux, SIEM, Splunk

What you’ll learn
How to build your own safe investigation enviroment (sandbox)
What are IOCs and how to eficiently analyze them
Practical Phishing investigationBasic network concepts, crucial for SOC investigations
Windows OS components and how they can be abused by attackers
How to investigate live Linux OS host
Quick investigation of malware samples
How effectively use SIEM
How to get free practise samples

Requirements
Minumum Cybersecurity knowledge is wellcommed

Description
Learn essential practical skills to become a SOC Analyst (L1/L2) and prepare yourself for working in a real Security Operations Center environment. This course focuses on practical knowledge that analysts use during daily investigations, alert triage, and incident response. It is designed for people who want to start a career in cybersecurity as well as for junior analysts who want to strengthen their investigation skills and better understand how SOC teams operate in practice.

The training combines theory with hands-on experience. Each section starts with a clear explanation of the topic and then moves to practical labs that simulate real scenarios faced by SOC analysts. You will learn how to analyze security events, investigate suspicious activity, and understand how attackers operate within systems and networks. In addition, every module includes guidance on how to continue practicing after the course using free tools, datasets, and publicly available training resources. This approach helps you build real-world skills instead of only learning concepts.

40 Hands-on lessons!

You will learn

• How to build your own safe investigation environment (sandbox) where you can analyze suspicious files, logs, and network activity without risking your main system

• What Indicators of Compromise (IOCs) are and how to efficiently search for, validate, and analyze them during security investigations

• Practical phishing investigation, including analyzing suspicious emails, links, attachments, and identifying common phishing techniques used by attackers

• Basic network concepts that are crucial for SOC investigations, such as traffic analysis and protocols

• Important Windows OS components and how they can be abused by attackers during intrusions and post-exploitation activities

• How to investigate a live Linux host and identify suspicious behavior, persistence mechanisms, and system anomalies

• Quick investigation and triage of malware samples to determine potential threats

• How to effectively use SIEM tools (Splunk) to analyze alerts, correlate events, and support incident investigations

• How to find and use free practice samples and environments to continue developing your SOC investigation skills

The course includes both beginner-friendly fundamentals and more advanced concepts for analysts who want to expand their SOC investigation skillset and gain confidence in real SOC workflows. By the end of the training, you will better understand how security monitoring works and how to approach real incidents in a structured and efficient way.

Who this course is for
Learn esential practical skills to become SOC analyst L1/L2. This course will show you technical aspects necessary in SOC analyst’s daily job and prepare you for working in SOC enviroment. Each section contains theory, followed by practise labs and guide how to get more free practise samples
Beginner SOC Analysts
SOC Analysts wanting to expand their knowlegde for T2 topics