security cybersecurity

SOC Tier 1 — the job, done from the ticket in

Six tickets, handed to you cold, in the order and the format a real shift hands them over. You decide what matters first and then defend the decision. Analysis and defence only — nothing here teaches you to attack anything.

  • trending_upIntermediate
  • schedule7h 14m
  • menu_bookLekcje: 12
  • publicEnglish
  • workspace_premiumBasic
SOC Tier 1 — the job, done from the ticket in

Odprawa

Tier 1 is not a knowledge job. Almost every fact you need is on the screen in front of you. The job is deciding, under time pressure and with an incomplete picture, which of the eleven things in the queue you touch first, and being able to say why out loud to somebody who was not there. So this segment is built out of the actual queue. A CVSS 9.8 with seven unpatched hosts behind it. Twelve people who cannot log in and an Active Directory team insisting nothing is wrong. A service account authenticating successfully seven times in fifteen minutes, which no alert will ever fire on. Three overnight VPN sessions from cities nobody travelled to. A leaver with a USB stick. A payment that went out an hour ago on the strength of an email. Every ticket lands before the lesson, the same way it does at work: five to thirty minutes ahead, no briefing, no hint about which one it is. You write a short report. The lesson is the debrief. You will be wrong on at least two of them. One of the six has a model answer with no technology in it at all, and the fastest analyst in the room will be the one who picks up a phone. A note on two of the tickets: CVE-2026-41089 and CVE-2026-50751 are teaching artefacts. They are written to behave exactly like real advisories and the numbers are invented for this course. Everything else — the host names, the timings, the log lines — comes from tickets that were worked, then anonymised.

Program kursu · Moduły: 4

lockOdblokowuje się z dostępem
  1. 01 What Comes First
    Lekcje: 3·1h 32m

    Nothing in this module is about how the vulnerability works. You will not be asked to explain Netlogon. You will be asked which box gets patched at 09:15 and which one waits until Thursday, which is…

  2. 02 The Obvious Suspect
    Lekcje: 3·1h 36m

    You are going to meet a symptom before you meet a cause, which is the normal order of events and the one every training course gets backwards. The skill being trained is asking for the right next…

  3. 03 When Nothing Fails
    Lekcje: 3·1h 59m

    Everything you have looked at so far announced itself. This module is the opposite case: a log where every single line is a success, and a VPN gateway where the sessions are valid. CVE-2026-50751 is…

  4. 04 Saying It So Somebody Acts
    Lekcje: 3·2h 7m

    Unresolved items first. Every item labelled ongoing or completed. Human language throughout — "someone's Windows PC", not "the endpoint". You will record yourself, listen back, and record it again,…

Najczęściej zadawane pytania

Czego się nauczę w SOC Tier 1 — the job, done from the ticket in?
Six tickets, handed to you cold, in the order and the format a real shift hands them over. You decide what matters first and then defend the decision. Analysis and defence only — nothing here teaches you to attack anything.
Czy potrzebuję wcześniejszego doświadczenia?
Przed rozpoczęciem SOC Tier 1 — the job, done from the ticket in zaleca się wcześniejszą wiedzę.
Ile czasu zajmuje SOC Tier 1 — the job, done from the ticket in?
SOC Tier 1 — the job, done from the ticket in obejmuje 4 modułów i 12 lekcji. Uczysz się we własnym tempie.
Jak uzyskać dostęp?
SOC Tier 1 — the job, done from the ticket in jest wliczony w każdą płatną subskrypcję.

Więcej w: Cyberobrona