SOC Tier 1 — the job, done from the ticket in
Six tickets, handed to you cold, in the order and the format a real shift hands them over. You decide what matters first and then defend the decision. Analysis and defence only — nothing here teaches you to attack anything.
- trending_upIntermediate
- schedule7h 14m
- menu_book12개 강의
- publicEnglish
- workspace_premiumBasic
개요
Tier 1 is not a knowledge job. Almost every fact you need is on the screen in front of you. The job is deciding, under time pressure and with an incomplete picture, which of the eleven things in the queue you touch first, and being able to say why out loud to somebody who was not there. So this segment is built out of the actual queue. A CVSS 9.8 with seven unpatched hosts behind it. Twelve people who cannot log in and an Active Directory team insisting nothing is wrong. A service account authenticating successfully seven times in fifteen minutes, which no alert will ever fire on. Three overnight VPN sessions from cities nobody travelled to. A leaver with a USB stick. A payment that went out an hour ago on the strength of an email. Every ticket lands before the lesson, the same way it does at work: five to thirty minutes ahead, no briefing, no hint about which one it is. You write a short report. The lesson is the debrief. You will be wrong on at least two of them. One of the six has a model answer with no technology in it at all, and the fastest analyst in the room will be the one who picks up a phone. A note on two of the tickets: CVE-2026-41089 and CVE-2026-50751 are teaching artefacts. They are written to behave exactly like real advisories and the numbers are invented for this course. Everything else — the host names, the timings, the log lines — comes from tickets that were worked, then anonymised.
강의 커리큘럼 · 4개 모듈
lock접근 시 이용 가능- 01 What Comes First3개 강의·1h 32m
Nothing in this module is about how the vulnerability works. You will not be asked to explain Netlogon. You will be asked which box gets patched at 09:15 and which one waits until Thursday, which is…
- 02 The Obvious Suspect3개 강의·1h 36m
You are going to meet a symptom before you meet a cause, which is the normal order of events and the one every training course gets backwards. The skill being trained is asking for the right next…
- 03 When Nothing Fails3개 강의·1h 59m
Everything you have looked at so far announced itself. This module is the opposite case: a log where every single line is a success, and a VPN gateway where the sessions are valid. CVE-2026-50751 is…
- 04 Saying It So Somebody Acts3개 강의·2h 7m
Unresolved items first. Every item labelled ongoing or completed. Human language throughout — "someone's Windows PC", not "the endpoint". You will record yourself, listen back, and record it again,…
자주 묻는 질문
- SOC Tier 1 — the job, done from the ticket in에서 무엇을 배우나요?
- Six tickets, handed to you cold, in the order and the format a real shift hands them over. You decide what matters first and then defend the decision. Analysis and defence only — nothing here teaches you to attack anything.
- 사전 경험이 필요한가요?
- SOC Tier 1 — the job, done from the ticket in을 시작하기 전에 기초 지식이 있으면 좋아요.
- SOC Tier 1 — the job, done from the ticket in은 얼마나 걸리나요?
- SOC Tier 1 — the job, done from the ticket in은 4개 모듈과 12개 강의로 구성되어 있고, 자신의 속도로 학습할 수 있어요.
- 어떻게 접근하나요?
- SOC Tier 1 — the job, done from the ticket in은 모든 유료 구독에 포함되어 있어요.