SANS – SEC450: SOC Analyst Training – Applied Skills for Cyber Defense Operations 2020-6

SEC450: SOC Analyst Training – Applied Skills for Cyber ​​Defense Operations. This course is an intensive and comprehensive training program designed for SOC analysts to gain the skills necessary to detect, analyze, and neutralize advanced cyberattacks. Over six days, the course combines theoretical training with 22 hands-on labs in a realistic simulated environment to prepare participants to confront complex threats. The course content includes advanced network traffic analysis, malware investigation, and structured threat hunting techniques that teach analysts how to think and act like an elite expert. A final Capstone competition challenges what they have learned in a real-world scenario. This course is suitable for analysts in organizations of all sizes, including Managed Security Service Providers (MSSPs), and equips them with the tools and methods needed to protect data and systems in a modern defense environment. Accompanying this course with the prestigious GIAC GSOC certification, it becomes the gold standard in security operations training, transforming analysts from reactive to proactive and confident threat hunters.

What you will learn

• Security Data Collection: How to get the most out of security telemetry data, including endpoint, network, application, and cloud data.
• Automation: How to identify the best opportunities to make your team more efficient using scripts, SOAR, and AI agents.
• Efficient Security Process: How to keep your security operations up to speed with in-depth discussions of what a SOC or security operations team should do at each stage, from security monitoring to detection, classification, analysis, and beyond.
• Quality Classification and Analysis: How to quickly separate common attack alerts from advanced, high-risk, high-impact attacks and perform accurate and complete security incident analysis.
• Reducing false alarms: Detailed explanations, processes, and techniques for minimizing false alarms.
• SOC Tools: Practical exercises that demonstrate how to collect, organize, and use relevant threat data in a Threat Intelligence Platform (TIP); principles of success for collecting endpoint security data, using SIEM, EDR, NDR, or XDR; how to quickly and accurately categorize security incidents; build AI-powered automated workflows for common SOC activities; and how to best utilize case management systems to analyze, document, track, and extract critical metrics from security incidents.
• Reducing Burnout and Turnover: Using scientific research and years of personal experience, this class teaches the factors that cause burnout in cybersecurity analysts and helps you build a sustainable career in cyber defense.

This course is suitable for people who:

• Security analysts
• Accident investigators
• Security engineers and architects
• Security Technical Managers
• SOC managers looking to gain additional technical perspective on how to improve analysis quality, reduce churn, and manage an efficient SOC.
• Anyone looking to start their career on the blue team.