SOC stands for Security Operations Center. It comprises a team of skilled cybersecurity professionals who monitor a company’s IT infrastructure. Monitoring the infrastructure is essential to checking, detecting, preventing, or responding to cyber threats.

You can take the EC-Council's SOC Essentials course even if you are yet to gain experience in IT or cybersecurity. High school and college students and career switchers can take the course to advance their careers in cybersecurity.

EC-Council's S|CE course is an entry-level certification program focusing on the fundamentals of SOC for students with no prior work experience. There are no prerequisites or eligibility requirements to apply for the course.

Yes, upon completion of the SOC Essentials (S|CE) course and passing the proctored exam, EC-Council will certify you, validating your knowledge and skills in this field.

The S|CE certification focuses on hands-on labs and immersive experience to help you gain job-ready skills in security technologies focused on computer networks, threat intelligence, incident response, and log management.

Yes, S|CE is a 100% online self-paced program so you can learn anytime, anywhere.

This module introduces key cloud concepts, terminology, and security principles. You'll gain the foundational knowledge to communicate effectively with cloud professionals and understand potential threats in cloud environments.

Key topics covered:
• Computer Network
• OSI Model
• Types of a Network
• Network Model
• Network Topologies
• TCP/IP Protocol Suite
• Network Security Controls
• Windows Security
• Unix/Linux Security
• Web Application Fundamentals
• Information Security Standards, Laws, and Acts

This module delves into the who, what, and why behind cyber threats. Learn about common attack types and how to identify vulnerabilities in your environment.

Key topics covered:
• Cyber Threats
• Intent-Motive-Goal
• Tactics-Techniques-Procedures (TTPs)
• Opportunity-Vulnerability-Weakness
• Vulnerability
• Threats & Attacks
• Example of Attacks
• Network-based Attacks
• Application-based Attacks
• Host-based Attacks
• Insider Attacks
• Malware (Viruses, Worms, Ransomware, etc.)
• Phishing and Social Engineering

Discover the purpose and importance of a Security Operations Center (SOC), its team structure, and the challenges faced in managing one effectively.

Key Topics covered:
• What is a Security Operations Center (SOC)?
• Importance of SOC
• SOC Team Roles and Responsibilities
• SOC KPI
• SOC Metrics
• SOC Maturity Models
• SOC Workflow and Processes
• Challenges in Operating a SOC

This module delves into the essential components of a SOC, including people, processes, technologies, and architecture. Explore SIEM systems and their role in log management.

Key Topics Covered:
• Key Components of a SOC
• People in SOC
• Processes in SOC
• Technologies in SOC
• SOC Architecture and Infrastructure
• Different Types of SOCs and Their Purposes
• Introduction to SIEM
• SIEM Architecture
• SIEM Deployment Models
• Data Sources in SIEM
• SIEM Logs
• Networking in SIEM
• Endpoint Data in SIEM

This module discusses the fundamentals of log management, including log types, sources, formats, and best practices. Understand the difference between local and centralized log management.

Key Topics Covered:
• Incident
• Event
• Log
• Typical Log Sources
• Need of Log
• Typical Log Format
• Local Log Management
• Centralized Log Management
• Logging Best Practices
• Logging/Log Management Tools

Learn how to leverage SIEM for security monitoring and analysis. Develop correlation rules, use dashboards and reports, and effectively manage alerts and escalations.

Key Topics Covered:
• SIEM Use Case Development
• Security Monitoring and Analysis
• Correlation Rules
• Dashboards
• Reports
• Alerting
• Triaging Alerts
• Dealing with False Positives Alerts
• Incident Escalation
• Communication Paths
• Ticketing Systems

This module dives deep into threat intelligence – sources, types, lifecycle, and its role in SOC operations. Explore threat hunting techniques and how to leverage threat intelligence for proactive defense.

Key Topics Covered:
• Introduction to Threat Intelligence
• Threat Intelligence Sources
• Threat Intelligence Types
• Threat Intelligence Lifecycle
• Role of Threat Intelligence in SOC Operations
• Threat Intelligence Feeds
• Threat Intelligence Sharing and Collaboration
• Threat Intelligence Tools/Platforms
• Introduction to Threat Hunting
• Threat Hunting Techniques
• Threat Hunting Methodologies
• Role of Threat Hunting in SOC Operations
• Leveraging Threat Intelligence for Hunting
• Threat Hunting Tools

This module covers incident response lifecycle – preparation, identification, containment, eradication, recovery, and post-incident analysis – to effectively respond to security breaches.

Key Topics Covered:
• Incident Handling Process
• Incident Classification and Prioritization
• Incident Response Lifecycle
• Preparation
• Identification
• Containment
• Eradication
• Recovery
• Post-Incident Analysis and Reporting