Skip to content
Security Notebooks

SOC Analyst

SOC & Blue Team

Chapters
13
Reading time
37.8 h
Level
Beginner → Intermediate → Advanced
13 chapters
Start reading →
  1. Defensive Foundations: SOC Roles, Tiers & Defense-in-DepthBeginner · 150 min
  2. The Detection Mindset: Logs, Telemetry & Data SourcesBeginner · 155 min
  3. The Cyber Kill Chain & MITRE ATT&CK for AnalystsBeginner · 160 min
  4. SIEM Fundamentals with Splunk: Searching & SPLIntermediate · 175 min
  5. Microsoft Sentinel & KQL for SOC AnalystsIntermediate · 175 min
  6. The Elastic Stack (ELK), Wazuh & Log AggregationIntermediate · 175 min
  7. Windows Event Log Analysis for AnalystsIntermediate · 175 min
  8. Linux & Network Log Analysis for AnalystsIntermediate · 180 min
  9. Email & Phishing Analysis for the SOCIntermediate · 180 min
  10. Network Security Monitoring: Zeek, Suricata, Snort & NIDSAdvanced · 185 min
  11. EDR Fundamentals & Endpoint InvestigationAdvanced · 185 min
  12. Alert Triage, Enrichment & Reducing False PositivesAdvanced · 185 min
  13. Incident Handling for Tier 1 & Tier 2 AnalystsAdvanced · 185 min