Course 01 · Detect, investigate and respond to cyber attacks
SOC Analyst (Blue Team)
Train for Security Operations Centre roles: network and OS security, SIEM with Splunk, Microsoft Sentinel and Wazuh, log analysis, incident response, threat intelligence, MITRE ATT&CK and EDR — the most fresher-friendly path into cyber security.
Best for: Graduates (B.Tech, BCA, B.Sc IT), network admins and IT support staff.
Duration
2 – 3 Months
Level
Beginner → Intermediate
Mode
Classroom (Lucknow) / Live online
Pre-book
₹49 till Diwali
Syllabus — module by module
Module 01
Security Foundations
- CIA triad & threat landscape
- TCP/IP & ports
- Windows & Linux internals
- Common attack types
Module 02
SIEM Operations
- Splunk searches & dashboards
- Microsoft Sentinel
- Wazuh open-source SIEM
- Use-case & alert tuning
Module 03
Log & Network Analysis
- Windows event logs
- Firewall & proxy logs
- Wireshark packet analysis
- Phishing email analysis
Module 04
Incident Response
- IR lifecycle (NIST)
- Triage & escalation
- Containment & eradication
- Reporting
Module 05
Threat Intelligence
- MITRE ATT&CK mapping
- IOCs & threat feeds
- Threat hunting
- Malware basics
Module 06
EDR & AI in the SOC
- Endpoint detection & response
- SOAR automation
- AI copilots for analysts
- Mock SOC shift
Projects you build
- Build a home SOC lab with Wazuh
- Investigate a simulated ransomware incident
- Write detection rules mapped to MITRE ATT&CK
You will be able to
- Monitor and triage alerts in a SIEM
- Investigate incidents end-to-end
- Write clear incident reports
Tools & tech
SplunkMicrosoft SentinelWazuhWiresharkSysmonMITRE ATT&CKVirusTotal
Maps to CompTIA Security+ / CySA+ and Microsoft SC-200
