Foundational Security Operations and Defensive Analysis OSDA (SOC-200)

 

Course Overview

OffSec set the industry standard with Penetration Testing with Kali Linux (PWK) teaching students how to perform practical attacks against networks and systems. Now with SOC-200 we reveal the consequences of common attacks from a defensive perspective.

Students who complete the course and pass the associated exam earn the Offensive Security Defense Analyst (OSDA) certification, demonstrating their ability to detect and assess security incidents.

Who should attend

  • Job roles like: Security Operations Center (SOC) Tier 1, Tier 2 and Tier 3 Analysts, Jr. roles in Threat Hunting and Threat Intelligence Analysts, Jr. roles in Digital Forensics and Incident Response (DFIR)
  • Anyone interested in detection and security operations, and/or committed to the defense or security of enterprise networks

Prerequisites

While there are no formal prerequisites, it’s strongly recommended that you have:

  • A solid foundation in TCP/IP networking
  • Familiarity with Linux and Windows operating systems
  • Basic understanding of cybersecurity concepts

Course Objectives

  • Students will get hands on experience investigating malicious activity
  • Students will learn about attack surfaces and how they can be reduced
  • Students will develop a working knowledge of security operations and best practices

Outline: Foundational Security Operations and Defensive Analysis OSDA (SOC-200)

  • Lesson 1: Attacker Methodology
  • Lesson 2: Windows Endpoint Introduction
  • Lesson 3: Windows Server Side Attacks
  • Lesson 4: Windows Client Side Attacks
  • Lesson 5: Windows Privilege Escalation
  • Lesson 6: Linux Endpoint Introduction
  • Lesson 7: Linux Server-Side Attacks
  • Lesson 8: Linux Privilege Escalation
  • Lesson 9: Windows Persistence
  • Lesson 10: Network Detections
  • Lesson 11: Antivirus Detections
  • Lesson 12: Active Directory Enumeration
  • Lesson 13: Network Evasion and Tunneling
  • Lesson 14: Windows Lateral Movement
  • Lesson 15: Active Directory Persistence
  • Lesson 16: SIEM Part One: Intro to ELK
  • Lesson 17: SIEM Part Two: Combining the Logs

Prices & Delivery methods

Online Training

Duration
5 days

Price
  • US $ 6,495

Schedule

Currently there are no training dates scheduled for this course.