TryHackMe: SOC Level 1 Path
Train as a SOC analyst: SIEM, network traffic analysis, threat intel, and incident response labs.
Skills you'll learn
We may earn a commission if you enroll through our links — it never affects the price you pay.
Similar courses
CyberSec First Responder – Advanced (CFR-A): Analyze
In this course, you will continue your advanced cybersecurity journey by analyzing logs for signs of attack. You'll also detect attacks using active monitoring systems and perform digital forensics to discover evidence of such attacks. These all contribute to the second stage of the overall CFR-A program: Analyze. This is the second course in a multi-course Specialization. All of the courses in this Specialization require that you use the provided virtual machines, which include all of the necessary tools and system configurations for the activity environment. The course setup instructions p
All levels
Introduction to SIEM (Splunk)
This course provides a comprehensive understanding of Security Information and Event Management (SIEM) concepts and practical skills using Splunk as an SIEM solution. You will discover SIEM fundamentals, Splunk architecture, data collection and management, data analysis, and advanced topics such as correlation and incident response. By the end of the course, you will effectively apply Splunk for log analysis, threat detection, and security monitoring. Learning Objectives: Module 1: Introduction to SIEM and Log Management • Recognize SIEM fundamentals and its role in cybersecurity. • Compreh
All levels
CFR: Reconnaissance, Attack, and Post-Attack Analysis
In this course, you'll continue developing your cybersecurity practitioner skills by implementing threat modeling and assessing the impact of reconnaissance and social engineering. Then, you'll assess the impact of a variety of different attack categories—system hacking attacks, web-based attacks, malware, hijacking and impersonation, denial-of-service (DoS) incidents, threats to mobile security, and threats to cloud security. You'll also analyze post-attack techniques like command and control (C2), persistence, lateral movement and pivoting, data exfiltration, and anti-forensics. This is the
All levels