|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/security-operations-center-soc
课程评论：没有评论
课程名称：安全运营中心（SOC） 课程概述：本课程专为在安全运营中心工作的初级网络安全分析师设计，旨在帮助学员掌握安全运营中心所需的基本技能。学员将学习安全运营中心的主要功能及其在保护组织资产免受网络攻击中的关键角色。完成课程后，学员将能够： - 理解SOC团队成员的日常活动与责任。 - 识别网络攻击者及其动机、攻击目标与方式。 - 回顾实施SOC的目标并了解组织通过SOC获得的商业利益。 - 介绍在SOC中遇到的技术与程序挑战。 课程大纲： 1. **安全运营中心简介**：学习SOC的基本功能和其在组织中的作用，了解SOC团队成员的活动与责任。 2. **SOC流程与服务**：评估SOC的主要责任及其与组织内其他部门的互动，理解SOC在事件响应各阶段提供的服务。 3. **SOC部署模型与类型**：了解SOC的不同类型、人员配置考量及其消费者特征。 4. **有效的SOC团队人员配置**：描述SOC成员的角色、技能要求及与其他成员和外部实体的互动。 5. **安全事件数据与SOC分析工具**：理解在SOC中进行的数据收集和数据分析活动，识别相关工具及其特性。 6. **与内外部利益相关者建立关键关系**：学习建立与外部组织良好关系的重要性及SOC团队使用的关键工具。 7. **理解SOC指标**：解释使用SOC指标来衡量SOC的有效性，包括安全数据聚合和检测有效性。 8. **理解SOC工作流与自动化**：了解工作流管理系统和自动化如何提高SOC的有效性。 为了成功完成课程，参与者应具备以下背景知识： 1. 具备相当于实施和管理思科解决方案（CCNA）v1.0课程所学的技能和知识。 2. 熟悉以太网和TCP/IP网络。 3. 具备Windows和Linux操作系统的工作知识。 4. 熟悉网络安全概念的基本知识。 本课程将为学员在网络安全领域的职业发展打下坚实基础。
Name:Introduction to Security Operations Center
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you acquire the fundamental skills required in a security operations center. You will learn the primary functions of a security operations center (SOC) and the critical role it plays in protecting organizational assets from cyber-attacks. By the end of the course, you will be able to: • Gain an understanding of SOC team member’s daily activities and responsibilities. • Identify who these bad actors are, their motives, why they attack, and what they attack. • Review the goals of implementing a SOC and covers the business benefits that an organization achieves by employing a SOC. • Introduce technical and procedural challenges in a SOC. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:Security Operations Center Processes and Services
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this lesson evaluates SOC processes and services. By the end of the course, you will be able to: • Understand primary responsibilities of a SOC and its interactions with other departments within the organization.• Understand various services that a SOC provides throughout the incident response phases. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:SOC Deployment Models and Types
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand SOC types, staffing considerations, and deployment models and their consumers. By the end of the course, you will be able to: • Describe various SOC types and staffing considerations. • Describe SOC deployment models and their corresponding consumer profiles. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:Staffing an Effective SOC Team
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you to understand about staff that work in SOC and their personnel roles and titles. Describe the necessary skills to work in a SOC. By the end of the course, you will be able to: • Describe the role of each SOC member in general and in the context of incidence response. Describe the skill set of each SOC member and their toolkit components. • Describe the interactions of SOC members with each other and external entities in the context of incidence response. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:Security Events Data and SOC Analyst Tools
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand the data collection and data analytics activities performed in a SOC. Identify tools for performing data collection and analysis activities and how they complement each other. By the end of the course, you will be able to: • Describe SOC relevant data and security event data. • Describe SOC tools and their features. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:Developing Key Relationships with Internal and External Stakeholders
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand the importance of using effective tools and developing a good relationship with external organizations. Describe the most important tools and software the SOC team uses to achieve this goal. By the end of the course, you will be able to: • Describe intelligence resources, regulatory agencies, and government industry organizations with which the SOC communicates. • Describe the policies, procedures, and governance rules to integrate with SOC procedures that define how it engages with users, HR, and legal in response to detected violations of procedures. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:Understanding SOC Metrics
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you explain the use of SOC metrics to measure the effectiveness of the SOC. By the end of the course, you will be able to: • Explain security data aggregation. • Explain Time to Detection (TTD) in context to network security. • Describe security controls detection effectiveness. • Describe SOC metrics. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
Name:Understanding SOC Workflow and Automation
Description:If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand the use of a workflow management system and automation to improve the effectiveness of the SOC. By the end of the course, you will be able to: • Describe SOC WMS concepts. • Describe how a typical workflow management system is integrated within a SOC.• Describe SOC WMS integration. • Provide an example of SOC workflow automation. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.
If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you acquire the fundamental skills required in a security operations center. You will learn the primary functions of a security operations center (SOC) and the critical role it plays in protecting organizational assets from cyber-attacks. By the end of the course, you will be able to: • Gain an understanding of SOC team member’s daily activities and responsibilities. • Identif
