What did we learn?
That's a wrap for now; but don't lose your passion for learning every day.
What we learned
We've brought you safely through the Building and Managing a SOC Course.
A quick recap of the places we visited and practiced:
- Business Cases for Creating a SOC
- SOC Models: In-House, Hybrid and Outsourced (MSSP)
- Services and Scope of a Modern SOC
- Defining the SOC's Technology Architecture
- Designing Use Cases and Correlation Rules
- Selecting Tools: SIEM, SOAR, EDR/XDR
- Training and Ongoing Development of the SOC Team
- Shift Structure and Analyst Tiers
- Escalation and Alert Management Processes
- Automating Tasks with SOAR
- Daily Alert Management and Prioritization
- Integrating Threat Intelligence Sources
- Periodic Evaluation of SOC Effectiveness
- Key Performance Metrics (MTTD, MTTR, Coverage)
- Roadmap toward Greater Maturity
Support us
Learn the ways to support the projects at no cost: Together we are more
Thank you so much for joining us on this journey 🤘🏽