Module 1 – Security Operations and Management

Module 2 – Understanding Cyber Threats, IoCs, and Attack Methodology

Module 3 – Incidents, Events, and Logging

Module 4 – Incident Detection with Security Information and Event Management (SIEM)

Module 5 – Enhanced Incident Detection with Threat Intelligence

Module 6 – Incident Response

Become a cyber first responder with the most practical program ever!

EC-Council’s Certified SOC Analyst (C|SA) program is the first step to joining a security operations center (SOC). Organizations need skilled SOC Analysts who can serve as the front-line defenders, warning other professionals of emerging and present cyber threats.

Learn to detect potential cyber threats actively and quickly respond to security incidents. Our program helps you to achieve proficiency in performing entry-level and intermediate-level SOC operations.  

About C|SA

Learn with simulated threat environments and gain real-world skills with 22 hands-on labs

$1,119

Paves your pathway to a security professional career in the SOC

Get insightful understanding of end-to-end SOC overflow

Get elaborated understanding of SIEM deployment

Proctored exam

$399

$1,399 

Mapped to the NICE 2.0 framework

Official EC-Council Certification

Learn with simulated threat environments and gain real-world skills with 22 hands-on labs

$429/Month

Paves your pathway to a security professional career in the SOC

Get insightful understanding of end-to-end SOC overflow

Proctored exam

Get elaborated understanding of SIEM deployment

$399

$539 

Mapped to the NICE 2.0 framework

Official EC-Council Certification

GET CERTIFIED AS

A DIGITAL FORENSICS EXPERT!

Elaborated Use Cases of SIEM Deployment

45

 Hands-On Tools 

80

Hands-On Labs

22

Gain Knowledge of SOC processes, procedures, technologies, and workflows. 

Gain a basic understanding and in-depth knowledge of security threats, attacks, vulnerabilities, attacker’s behaviors, cyber kill chain, etc. 

Able to recognize attacker tools, tactics, and procedures to identify indicators of compromise (IOCs) that can be utilized during active and future investigations. 

Gain knowledge of the Centralized Log Management (CLM) process. 

Able to monitor and analyze logs and alerts from a variety of different technologies across multiple platforms (IDS/IPS, end-point protection, servers, and workstations). 

Able to perform Security events and log collection, monitoring, and analysis.

Gain experience and extensive knowledge of Security Information and Event Management.

Gain knowledge of administering SIEM solutions (Splunk/AlienVault/OSSIM/ELK).

Understand the architecture, implementation and fine-tuning of SIEM solutions (Splunk/AlienVault/OSSIM/ELK).

Gain hands-on experience in SIEM use case development process.

Able to develop threat cases (correlation rules), create reports, etc.

Learn use cases that are widely used across the SIEM deployment.

Plan, organize, and perform threat monitoring and analysis in the enterprise.

Able to monitor emerging threat patterns and perform security threat analysis.

Gain hands-on experience in the alert triaging process.

Able to escalate incidents to appropriate teams for additional assistance.

Able to use a Service Desk ticketing system.

Able to prepare briefings and reports of analysis methodology and results.

Gain knowledge of integrating threat intelligence into SIEM for enhanced incident detection and response.

Able to make use of varied, disparate, constantly changing threat information.

Gain knowledge of Incident Response Process.

Gain understating of SOC and IRT collaboration for better incident response.

SOC Analysts

Network and Security Administrators

Network and Security Engineers

Network Defense Analyst

Network Defense Technicians

Network Security Specialist

Network Security Operator

Cybersecurity Analyst

Entry-level cybersecurity professionals