SOC Analyst and Cybersecurity Specialist

Fundamentals and Basic Concepts

• Ethical principles of hacking and legal framework.
• Types of attackers, threats, and attack vectors.
• Network architecture, OSI and TCP/IP models.
• Essential protocols and services: HTTP, DNS, SMTP, FTP.
• Introduction to Linux and Windows operating systems for auditing.

Recognition and Information Gathering

• Concept of footprinting and passive vs. active recognition.
• Information gathering techniques and OSINT.
• Network and services scanning with Nmap.
• Identification of ports, services, and operating systems.
• Listing objectives and analyzing results.

Exploitation and Vulnerabilities

• Identification and analysis of common vulnerabilities (CVE, CVSS).
• Exploitation of typical vulnerabilities: SQL Injection, XSS, RCE.
• Basic use of exploitation tools and frameworks.
• Session and shell management.
• Safe practices in controlled laboratory environments.

Escalation of Privileges and Persistence

• Concepts and phases of the escalation of privileges.
• Escalation in Linux: sudoers, permissions, misconfigured scripts.
• Escalation in Windows: services, registry keys, local exploits.
• Basic persistence techniques: scheduled tasks, backdoors.
• Mitigation and traceability of post-exploitation actions.

Documentation and Best Practices

• Structure and writing of technical audit reports.
• Vulnerability classification and prioritization (VSS).
• Recommendations and remediation plan.
• Use of templates and tools for reports (OWASP, Markdown).
• Ethics, communication and good practices of the offensive professional.

Cybersecurity Fundamentals

• Basic concepts and CIA principles (confidentiality, integrity, availability).
• Overview of threats and actors (internal and external).
• Regulatory and ethical frameworks (ISO 27001, NIST, GDPR).
• Roles in cybersecurity: SOC, analyst, pentester, incident responder.
• Differences between offensive and defensive security.

Networks, Protocols and Perimeter Security

• Networking review: OSI and TCP/IP models.
• Protocols and essential services.
• Concepts of NAT, VLAN, VPN, Firewalls and DMZ.
• Diagnostic and monitoring tools (ping, tracert, netstat).
• Basic device configuration and security measures.

Threats, Vulnerabilities and Risk Management

• Threat classification: malware, phishing, DoS/DDoS, MITM.
• Concepts of vulnerability and exposure (CVE).
• Vulnerability management and risk assessment cycle.
• Scanning tools: OpenVAS, Nessus.
• Risk analysis and prioritization methodologies.

Cryptography and Information Security

• Fundamentals of encryption: symmetric and asymmetric.
• Hashing, digital signatures and certificates.
• Practical applications of cryptography (TLS, VPN, secure email).
• Good data protection practices.
• Practical exercises with encryption tools.

Operating Systems and Environment Security

• Security in Linux and Windows systems.
• Essential commands and permission settings.
• Introduction to PowerShell and Bash for secure administration.
• Fundamentals of social engineering and prevention.
• Hardening and access control practices.

Fundamentals and Context of Cybersecurity

• Cybersecurity principles and threat landscape.
• Actors, advocates, and roles in a SOC.
• Basic concepts of Windows and Linux operating systems.
• Using the command line and analyzing logs.
• Introduction to the work of a security analyst.

Networks, Protocols and Infrastructure

• Fundamentals of TCP/IP networking and architecture.
• Network protocols and services (DNS, HTTP, DHCP, etc.).
• Network devices: switches, routers, firewalls.
• Security infrastructure: segmentation and secure zones.
• Connectivity and traffic flow monitoring.

Threats, Attacks and Monitoring

• Types of attackers and common techniques.
• Common threats: malware, phishing, DoS, exploits.
• Detection and monitoring with IDS, IPS and SIEM.
• Network traffic and behavior analysis.
• Incident mitigation strategies.

Defense, Cryptography and Asset Protection

• Access control and authentication.
• Threat Intelligence.
• Applied cryptography: encryption, signatures and PKI.
• Endpoint protection and vulnerability management.
• Secure protocols: VPN, TLS, IDS/IPS.

Security Data, Alerts and Incidents

• Security data analysis: logs and events.
• Evaluation and classification of alerts in SOC.
• Correlation and normalization of data.
• Incident cycle management.
• Incident response and forensic analysis.

• Course Review
  
  
• Case study
  

• Preparation of exam-type questions