By the end of the training, you'll have a comprehensive understanding of Security Operations Center functions and investigative techniques—developed through real-world scenarios that reflect the demands placed on today’s SOC professionals.
This course includes an Exam Vouchers for TCM Security’s Practical SOC Analyst Associate (PSAA) certification. Each exam voucher includes 1 exam attempt and is valid for 12-months from the course completion date.
Security Operations Fundamentals Phishing Analysis Network Security Monitoring Network Traffic Analysis Endpoint Security Monitoring Endpoint Detection and Response Log Analysis and Management Security Information and Event Management (SIEM) Threat Intelligence Digital Forensics Incident ResponseWho should attend SOC Level 1 Course
- Aspiring SOC Analysts and Incident Responders.
- Individuals with a strong interest in blue teaming and a desire to understand how security operations work in real-world environments.
- IT professionals with some experience in networking or systems administration who want to expand their skills into the SOC and cybersecurity field.
- Students looking to prepare for the Practical SOC Analyst Associate (PSAA) exam.
Prerequisites for SOC Level 1 Course
SOC Level 1 Course Outline
Resources
FAQs on SOC Level 1
This course is designed for aspiring SOC analysts, incident responders, and IT professionals with networking or systems administration experience looking to move into cybersecurity. It’s also ideal for students preparing for the Practical SOC Analyst Associate (PSAA) exam.
Students should have basic familiarity with Windows and Linux, command-line experience, and understanding of core networking and security concepts (e.g., CIA triad, encryption, subnets). Completion of a Practical Help Desk course or equivalent A+/Net+ knowledge is recommended.
The course covers key SOC operations including phishing analysis, network and endpoint security monitoring, log analysis, SIEM usage, threat intelligence, digital forensics, and incident response, providing a comprehensive foundation for SOC analyst roles.
Participants need a computer with at least 8GB RAM, 256GB storage, an up-to-date operating system and browser, and a stable internet connection to access labs and course materials.
Yes, the course features extensive hands-on labs, including ticket challenges, live incident response exercises, and real-world scenarios using tools like TCPDump, Wireshark, and SysInternals across both Windows and Linux environments.


