Module 06 · Sare
Hawlgalka SOC & Alert Triage
SOC Operations & Alert Triage
Waxaad fahmi doontaa qaab-dhismeedka SOC-ga, workflow-ga triage-ga, MITRE ATT&CK, documentation iyo metrics-ka lagu qiimeeyo SOC performance.
7 cashar 1 saac 0/7 dhammaystiran
Casharrada
1Qaab-dhismeedka SOC & TiersSOC Structure and Analyst TiersFaham sida SOC-gu u dhisan yahay, doorka Tier 1/2/3 iyo maalinta shaqo ee analyst-ka.10 daq2Workflow-ga Alert Triage-gaThe Alert Triage WorkflowBaro nidaam 6-tallaabo ah oo aad alert kasta ku baari karto si isku mid ah oo waxtar leh.13 daq3MITRE ATT&CK FrameworkMITRE ATT&CK FrameworkLuqadda caalamiga ah ee lagu sharraxo dhaqanka weeraryahannada — muhiim u ah documentation iyo detection engineering.10 daq4Ticketing & DocumentationTicketing and Documentation Best PracticesFaham sababta documentation muhiim u yahay iyo sida ticket wanaagsan loo qoro.12 daq5SOC Metrics & KPIsSOC Metrics and Key Performance IndicatorsFaham metrics-ka SOC-gu isticmaalo si loo qiimeeyo waxtarka iyo waqtiga jawaabta.13 daq6SOC Tools EcosystemThe SOC Tools EcosystemGuud ahaan eeg tools-ka SOC-gu isticmaalo — SIEM, SOAR, EDR — iyo sida ay isugu shaqeeyaan.15 daq7SOC Triage — Full Capstone LabSOC Triage Capstone LabKu dar dhammaan waxa aad baratay module-kan — samee triage buuxa oo alerts badan ah, kala hormari, oo qor tickets.15 daq