SOC & Incident Response
Detecting threats and responding as a security operations team.
Beginner
Start here. No background needed beyond school maths.
Document
Beginner
↗ External site
LetsDefend: Blue Team Training
Practise as a SOC analyst: triage real-looking alerts in a simulated monitoring console and investigate logs. Free account has a starter tier.
Sign up to see the source
Document
Beginner
↗ External site
MITRE ATT&CK
The shared knowledge base of attacker tactics and techniques that security teams use to describe and detect threats.
Sign up to see the source