SOC Analyst and Cloud Security.
Build your next skill.

Format: 35 training days, live online. Foundation-to-project coverage with guided practice. Exact pace and batch schedule are agreed with the trainer.

Prerequisites: Basic networking, Windows/Linux and cloud concepts. Labs use authorized training environments only.

Days 1-5 | Security and network foundations

• TCP/IP, DNS, HTTP, common ports and network traffic
• Windows/Linux events, endpoint concepts and security fundamentals
• SOC workflow, alert severity and evidence handling

Days 6-10 | Cloud identity and security posture

• Cloud shared responsibility, IAM, MFA and least privilege
• Network controls, encryption, secrets and audit logging
• Review common cloud misconfigurations in a safe lab

Days 11-15 | SIEM and log analysis

• Collect and normalize identity, endpoint and cloud logs
• SIEM searches and introductory KQL with Microsoft Sentinel examples
• Dashboards, time windows and alert triage

Days 16-20 | Detection and investigation

• Phishing, suspicious sign-ins, malware and privilege misuse scenarios
• Correlate events, examine indicators and build an incident timeline
• Detection rules, false-positive tuning and MITRE ATT&CK mapping

Days 21-25 | Incident response

• Preparation, triage, containment, eradication and recovery
• Escalation, case notes, playbooks and communication
• Preserve evidence and practise a tabletop incident

Days 26-30 | Threat hunting and cloud defence

• Hypothesis-driven hunting and basic threat intelligence
• Cloud workload alerts, posture findings and remediation priorities
• Identity compromise and cloud storage exposure investigations

Days 31-35 | Capstone and interview practice

• Investigate a simulated cloud incident and produce an evidence-backed report
• Present a detection rule, response plan and improvement recommendations
• Log-analysis exercises, scenario questions and mock interview

Training and interview preparation

• Live online training with guided exercises and project discussion.
• Interview preparation, technical questions and mock interview practice.
• Live demo video available. Ask the team to arrange the demo and confirm the batch details.

This is a practical learning plan, not a promise of certification, a job or production-level expertise in 35 days. Cloud labs or model APIs may have usage costs; confirm lab access with the trainer before starting.