During this five-day course, students will learn the common security concepts and security techniques that are used in a Security Operation Center. These concepts and techniques are used to find threats on a network using a variety of security tools within a real-world network infrastructure.

This boot camp is intended to teach students the requirements needed to pass both 210-250 (SECFND) and 210-255 (SECOPS) exam.

Upon completion of this course, students will be able to:

• Describe, compare and identify various network concepts
• Fundamentals of TCP/IP
• Describe and compare fundamental security concepts
• Describe network applications and the security challenges
• Understand basic cryptography principles
• Understand endpoint attacks, including interpreting log data to identify events in Windows and Linux
• Develop knowledge in security monitoring, including identifying sources and types of data and events
• Describe the three common SOC types, tools used by SOC analysts, job roles with SOC, and incident analysis within a threat-centric SOC
• Explain security incident investigations, including event correlation and normalization and common attack vectors, and be able to identify malicious and suspicious activities
• Explain the use of a SOC playbook to assist with investigations, the use of metrics to measure the effectiveness of the SOC, the use of a SOC workflow management system and automation to improve SOC efficiency, and the concepts of an incident response plan.

Prerequisites