SOC Analyst Mindset
Systems Internals, Enterprise Infrastructure, Adversary Tradecrafts, Analysis Process & Much More
To be announced soon.
Learning Track
DFIR Digital Forensics, Incident Response & Threat Hunt
The Roadmap
What is open now, what we are building, and what comes next.
- Available 0
- Releasing 3
- In Production 0
- In Design 0
- Concept 0
Foundations
The mindset: how analysts, hunters and responders think.
-
DFIR-200 Releasing
SOC Analyst Mindset
-
DFIR-201 Releasing
Investigation & Analysis Insights
-
DFIR-206 Releasing
Chasing Rider
The Path
Take them in order, from the first code to the last. Live trainings and self-paced courses both count.
-
Step 1
-
Step 2
Investigation & Analysis Insights
Standalone sessions on how analysts think: storytelling, context, the Pyramid of Pain and pivoting
A series of standalone sessions on how analysts really think: reading an intrusion as a story, building context, going after the indicators that hurt the attacker, and pivoting without getting lost.
-
Step 3
Chasing Rider
A practical incident response series: one intrusion, followed from the first alert to the domain controller
Follow Rider.exe through a real intrusion, from Tier 1 triage in Elastic to PsExec, identity, file and network telemetry, and the incident response decisions along the way. New episodes are added as the series continues.