Curriculum
Course Content
4 items · 1 sections
- 01 Correlating endpoint, network and SIEM
- 02 Resolving conflicting evidence
- 03 A defensible conclusion
- 04 Working under time pressure
BTL2
Advanced
Certificate
Advanced SOC Investigation
A multi-source investigation run to completion. Pulling endpoint, network and SIEM data into one picture, resolving conflicting evidence, and reaching a defensible conclusion under time pressure.
Skills
What You Will Learn in This Course
Correlate endpoint, network and SIEM data.
Resolve conflicting evidence.
Reach a defensible conclusion.
Work effectively under time pressure.
About This Course
A multi-source investigation run to completion. Pulling endpoint, network and SIEM data into one picture, resolving conflicting evidence, and reaching a defensible conclusion under time pressure.
Requirements
- The investigation modules.
Who It Is For
- BTL2-track analysts.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
