Mohammad Ashraful Alam ✔ Verified

Learning Objectives

Develop practical skills to monitor, detect, and investigate cybersecurity threats. Learn SIEM, log analysis, alert triage, and incident response techniques. Identify common attacks, analyze security events, and perform threat investigations. Gain hands-on experience with real-world SOC tools and workflows. Build the skills and confidence required to work as a SOC Analyst.

Training Plan / Agenda

SOC Analyst Course — Day-by-Day Day 1 – Security Operations & SOC Fundamentals Security Operations and Management SOC operational field and management strategy Industry practices and knowledge sharing Introduction to cybersecurity operations for SOC Analysts Day 2 – SOC Lab & Networking Fundamentals SOC lab environment setup Networking knowledge for SOC Analysts Virtualization setup using VirtualBox / VMware Linux Kernel use cases and architecture Day 3 – Operating Systems & Hardening Windows, macOS, Ubuntu, Kali Linux and Debian basics OS hardening according to CIS Script-based and manual OS hardening OS environment and security considerations for SOC Analysts Day 4 – Log Analysis Understanding incidents, events and logging Windows log analysis Linux log analysis Windows Firewall log analysis Linux Firewall log analysis Apache log analysis Day 5 – SIEM & Wazuh SIEM architecture Understanding SIEM operations Wazuh SIEM installation and setup SIEM monitoring fundamentals Day 6 – SIEM Integrations & Threat Intelligence Integrating ChatGPT with SIEM workflows VirusTotal integration AbuseIPDB integration Malware threat analysis MITRE ATT&CK tactics and techniques Day 7 – SOC Monitoring & Incident Detection SIEM logs and dashboard monitoring Manual dashboard creation Practical SOC operations Attack simulation and response Incident response using the NIST Risk Management Framework Day 8 – Advanced Wazuh & Final Practical Wazuh regex Wazuh custom rulesets Fine-tuning detection rules Integrating logs from specific locations into SIEM Putting everything together Final practical / extraordinary task Additional Advanced Topics (On Demand) Custom log decoding/parsing Fine-tuning Custom detection rules Wazuh regex and ruleset development

Training Modules

SOC Analyst Course — Day-by-Day Day 1 – Security Operations & SOC Fundamentals Security Operations and Management SOC operational field and management strategy Industry practices and knowledge sharing Introduction to cybersecurity operations for SOC Analysts Day 2 – SOC Lab & Networking Fundamentals SOC lab environment setup Networking knowledge for SOC Analysts Virtualization setup using VirtualBox / VMware Linux Kernel use cases and architecture Day 3 – Operating Systems & Hardening Windows, macOS, Ubuntu, Kali Linux and Debian basics OS hardening according to CIS Script-based and manual OS hardening OS environment and security considerations for SOC Analysts Day 4 – Log Analysis Understanding incidents, events and logging Windows log analysis Linux log analysis Windows Firewall log analysis Linux Firewall log analysis Apache log analysis Day 5 – SIEM & Wazuh SIEM architecture Understanding SIEM operations Wazuh SIEM installation and setup SIEM monitoring fundamentals Day 6 – SIEM Integrations & Threat Intelligence Integrating ChatGPT with SIEM workflows VirusTotal integration AbuseIPDB integration Malware threat analysis MITRE ATT&CK tactics and techniques Day 7 – SOC Monitoring & Incident Detection SIEM logs and dashboard monitoring Manual dashboard creation Practical SOC operations Attack simulation and response Incident response using the NIST Risk Management Framework Day 8 – Advanced Wazuh & Final Practical Wazuh regex Wazuh custom rulesets Fine-tuning detection rules Integrating logs from specific locations into SIEM Putting everything together Final practical / extraordinary task Additional Advanced Topics (On Demand) Custom log decoding/parsing Fine-tuning Custom detection rules Wazuh regex and ruleset development