جامع SOC Tier2 – Security Operations Center

SEC511: Continuous Monitoring and Security Operations

• SECTION 1: Current State Assessment, SOCs
• and Security Architecture
• SECTION 2: Network Security Architecture
• SECTION 3: Network Security Monitoring
• SECTION 4: Endpoint Security Architecture
• SECTION 5: Automation and Continuous
• Security Monitoring
• SECTION 6: Capstone: Design, Detect, Defend

SANS SEC555: SIEM with Tactical Analytics

• SECTION 1: SIEM Architecture
• SECTION 2: Service Profiling with SIEM
• SECTION 3: Advanced Endpoint Analytics
• SECTION 4: Baselining and User Behavior Monitoring
• SECTION 5: Tactical SIEM Detection and Post-Mortem Analysis
• SECTION 6: Capstone: Design, Detect, Defend

SANS SEC503: Network Monitoring and Threat Detection In-Depth

• SECTION 1: Network Monitoring and Analysis: Part I
• SECTION 2: Network Monitoring and Analysis: Part II
• SECTION 3: Signature-Based Threat
• Detection and Response
• SECTION 4: Building Zero-Day Threat
• Detection Systems
• SECTION 5: Large-Scale Threat Detection, Forensics, and Analytics
• SECTION 6: Advanced Network Monitoring and Threat
• Detection Capstone