EC Council Certified SOC Analyst (CSA) Training Course

Security Operations Centres are at the frontline of cyber defence, continuously monitoring systems and networks to identify suspicious activity, detect emerging threats and coordinate the response to security incidents.

The EC-Council Certified SOC Analyst (CSA) Training Course develops the technical and operational skills required to perform effective SOC analysis and contribute confidently to a security operations team. EC-Council positions the certification for current and aspiring Tier I and Tier II analysts, with a strong focus on practical SOC operations.

Who this course is for

The lab-intensive Certified SOC Analyst (CSA) programme emphasizes the holistic approach to deliver the advanced knowledge of how to identify, validate and defend against cyber-attacks. The event is targeted at SOC Level 1 & Level 2 team members and their managers and those IT staff aspiring for a role in SOC. The course is particularly suitable for:

• SOC Level 1 / Tier I analysts;
• SOC Level 2 / Tier II analysts;
• Junior SOC analysts;
• Cyber security analysts;
• Security operations analysts;
• Threat analysts;
• Incident-response analysts;
• Blue team professionals;
• SOC team leaders and managers;
• Network and security administrators; and
• IT professionals looking to move into a SOC or cyber defence role.

What you’ll learn

The goal of this course is to help you master how to use SIEM and other SOC tools to identify and protect the business from cyber threats. Candidates will learn to perform enhanced threat detection using the predictive capabilities of threat intelligence. You walk out the door with skills needed to be an effective SOC response team member as well as the internationally recognized SOC Analyst certification.

Course outline

• Module 01: Security Operations and Management
• Module 02: Understanding Cyber Threats, IoCs, and Attack Methodology
• Module 03: Log Management
• Module 04: Incident Detection and Triage
• Module 05: Proactive Threat Detection
• Module 06: Incident Response
• Module 07: Forensic Investigation and Malware Analysis
• Module 08: SOC for Cloud Environments

The Certified SOC Analyst training course is delivered live online over three days. By the end of the course, delegates will be able to:

• Develop practical, job-relevant SOC analyst skills;
• Understand the complete SOC workflow from monitoring through to response and reporting;
• Gain practical experience in SIEM and security-event analysis;
• Learn how to identify and investigate indicators of compromise;
• Improve alert-triage and threat-detection capability;
• Use threat intelligence to enhance incident detection;
• Understand attacker behaviour and the cyber kill chain;
• Develop incident-response and escalation skills;
• Gain exposure to forensic investigation and malware analysis;
• Understand SOC operations across traditional and cloud environments;
• Explore how AI can enhance modern security operations; and
• Prepare for an internationally recognised cyber security certification.