CSA: Certified SOC Analyst Training

4.8

(4.8)

Candidates for CSA certification get access to some of the most qualified instructors in the business, who teach them cutting-edge techniques that are in high demand.

Category : EC-Council

Course Price : $1895 Per Participant

Enroll Now download

Course PDF

Check Schedule

Course Description

Getting a Certified SOC Analyst (C|SA) certification is the first thing you need to do if you want to work for a Security Operations Centre (SOC).

It is intended to assist existing and aspiring Tier I & Tier II SOC analysts in becoming successful in carrying out beginning and intermediate-level operations, and it has been created to do so.

Candidates for CSA certification get access to some of the most qualified instructors in the business, who teach them cutting-edge techniques that are in high demand.

Career advancement is a primary goal of this program, which teaches participants to combine in-depth, detailed knowledge with higher-level skills in order to make a more active contribution to a SOC team.

CSA courses start with an introduction to SOC operations and then proceed to more complex topics like SIEM deployment, log management and correlation, advanced event detection, and incident response.

500+

Courses

20+

Years of Experience

95K+

Global Learners

What you will learn

Learn to use SIEM solutions and predictive capabilities using threat intelligence
Introduces the practical aspect of SIEM using advanced and the most frequently used tools
Learn to perform enhanced threat detection using the predictive capabilities of Threat Intelligence
Witnessed the evolution of cyber risks, creating an unsafe environment for the players of various sectors.

Who should attend this course?

Network and Security Administrators	Network and Security Engineers
Network Defense Analyst	Network Defense Technicians
Network Security Specialist	Network Security Operator
Security professional handling network security operation	Cybersecurity Analyst

Schedules

Oops! For this course, there are currently no public schedules available. Clicking on "Notify Me" will allow you to express your interest.

For dates, times, and location customization of this course, get in touch with us.

You can also speak with a learning consultant by calling 800-961-0337.

Curriculum

Module 1: Security Operations and Management

Understand the SOC Fundamentals

Discuss the Components of SOC: People, Processes and Technology

Understand the Implementation of SOC

Module 2: Understanding Cyber Threats, IoCs, and Attack Methodology

Describe the term Cyber Threats and Attacks

Understand the Network Level Attacks

Understand the Host Level Attacks

Understand the Application Level Attacks

Understand the Indicators of Compromise (IoCs)

Discuss the Attacker’s Hacking Methodology

Module 3: Incidents, Events, and Logging

Understand the Fundamentals of Incidents, Events, and Logging

Explain the Concepts of Local Logging

Explain the Concepts of Centralized Logging

Module 4: Incident Detection with Security Information and Event Management (SIEM)

Understand the Basic Concepts of Security Information and Event Management (SIEM)

Discuss the Different SIEM Solutions

Understand the SIEM Deployment

Learn Different Use Case Examples for Application Level Incident Detection

Learn Different Use Case Examples for Insider Incident Detection

Learn Different Use Case Examples for Network Level Incident Detection

Learn Different Use Case Examples for Host Level Incident Detection

Learn Different Use Case Examples for Compliance

Understand the Concept of Handling Alert Triaging and Analysis

Module 5: Enhanced Incident Detection with Threat Intelligence

Learn Fundamental Concepts on Threat Intelligence

Learn Different Types of Threat Intelligence

Understand How Threat Intelligence Strategy is Developed

Learn Different Threat Intelligence Sources from which Intelligence can be Obtained

Learn Different Threat Intelligence Platform (TIP)

Understand the Need of Threat Intelligence-driven SOC

Module 6: Incident Response

Understand the Fundamental Concepts of Incident Response

Learn Various Phases in Incident Response Process

Learn How to Respond to Network Security Incidents

Learn How to Respond to Application Security Incidents

Learn How to Respond to Email Security Incidents

Learn How to Respond to Insider Incidents

Learn How to Respond to Malware Incidents

What Exam Do I Need To Get Certified?

312-39 CSA : EC-Council CSA Certified SOC Analyst with Remote Proctoring Services

Exam Title:	Certified SOC Analyst
Exam Code:	312-39
Test Format:	Multiple Choice
Number of Questions:	100
Duration:	3 hours
Availability:	EC-Council Exam Portal
Passing Score:	70%