SOC Operations

SOC Roles & Responsibilities

Tier 1/2/3 analyst roles, escalation paths, and on-call procedures.

SIEM Fundamentals

Log aggregation, correlation rules, and alert management.

KQL Query Writing

Write effective detection queries for Microsoft Sentinel.

Incident Triage Process

How to classify, prioritise, and escalate security incidents.

Threat Hunting Basics

Proactive hunting techniques using MITRE ATT&CK.

Playbook Design

Creating effective runbooks for common incident types.

SOC Maturity Assessment

Evaluate your SOC's maturity level and identify improvement areas.