SOC & Incident Response
Detecting threats and responding as a security operations team.
Beginner
Start here. No background needed beyond school maths.
LetsDefend: Blue Team Training
Practise as a SOC analyst: triage real-looking alerts in a simulated monitoring console and investigate logs. Free account has a starter tier.
Sign up to see the source
TryHackMe: SOC Level 1
A learning path for entry-level SOC analysts: security operations basics, phishing analysis, SIEM tools and incident handling in browser labs.
Sign up to see the source
MITRE ATT&CK
The shared knowledge base of attacker tactics and techniques that security teams use to describe and detect threats.
Sign up to see the source