Destinatários

• IT professionals
• Any learner interested in entering associate-level cybersecurity roles such as:
  • SOC cybersecurity analysts
  • Computer or network defense analysts
  • Computer network defense infrastructure support personnel
  • Future incident responders and SOC personnel
  • Cisco integrators or partners

Pré-requisitos

To fully benefit from this course, you should first complete the following course or obtain the equivalent knowledge and skills:

• Understanding Cisco Cybersecurity Fundamentals (SECFND)

Objetivos

After taking this course, you should be able to:

• Describe the three common SOC types, tools used by SOC analysts, job roles within the SOC, and incident analysis within a threat-centric SOC
• Explain security incident investigations, including event correlation and normalization and common attack vectors, and be able to identify malicious and suspicious activities
• Explain the use of an SOC playbook to assist with investigations, the use of metrics to measure the effectiveness of the SOC, the use of an SOC workflow management system and automation to improve SOC efficiency, and the concepts of an incident response plan

Programa

• SOC Overview
• Security Incident Investigations
• Operations