CSA

Computer Network Fundamentals

TCP/IP

Application Layer Protocols

Transport Layer Protocols

Internet Layer Protocols

Link Layer Protocols

IP Addressing and Port Numbers

Network Security Controls

Network Security Devices

Windows Security

Unix/Linux Security

Web Application Fundamentals

Information Security Standards, Laws and Acts

Security Management

Security Operations

Security Operations Center (SOC)

Need of SOC

SOC Capabilities

SOC Operations

SOC Workflow

Components of SOC: People, Process and Technology

People

Technology

Processes

Types of SOC Models

SOC Maturity Models

SOC Generations

SOC Implementation

SOC Key Performance Indicators (KPI) and Metrics

Challenges in Implementation of SOC

Best Practices for Running SOC

SOC vs NOC

Cyber Threats

Intent-Motive-Goal

Tactics-Techniques-Procedures (TTPs)

Opportunity-Vulnerability-Weakness

Network Level Attacks

Host Level Attacks

Application Level Attacks

Email Security Threats

Understanding Indicators of Compromise (IoCs)

Understanding Attacker’s Hacking Methodology

Incidents

Event

Log

Typical Log Sources

Need of Log

Logging Requirements

Typical Log Format

Logging Approaches

Local Logging

Centralized Logging

Security Information and Event Management(SIEM)

Security Analytics

Need of SIEM

Typical SIEM Capabilities

SIEM Architecture and Its Components

SIEM Solutions

SIEM Deployment

Incident Detection with SIEM

Use Cases Across all SIEM deployments

Handling Alert Triaging and Analysis

Understanding Cyber Threat Intelligence

Why Threat Intelligence-driven SOC

Threat Intelligence Strategy

Threat Intelligence Lifecycle

Threat Analyst Roles in Threat Intelligence Lifecycle

Key Challenges in Traditional (Non Intelligence-driven) SOC

Threat Intelligence-driven SOC

Integration of Threat Intelligence into SIEM

Threat Intelligence Use Cases for Enhanced Incident Response