-
Book Overview & Buying
-
Table Of Contents
SOC Analyst Career Guide
By :
Detection engineering is at the core of a SOC, Managed Detection and Response (MDR), Extended Detection and Response (XDR), and the blue team. Detection revolves around the deployment and utilization of a Security Information and Event Management (SIEM) tool alongside many sensors and collectors placed throughout the network. In this chapter, you will be developing and deploying a live SIEM tool and understanding how to use it to protect your home network. Those skills can be highlighted in future job interviews and used in future workplaces. You will understand not only how to triage but also how to create or engineer the SIEM system and security tools within your environment. While you will create multiple SIEMs, you will not go into full-scope engineering, such as designing parsers, pipelines, and rules at a production scale. This chapter goes well beyond a Level 1 SOC analyst role, making you more than prepared for it.
In this chapter, you’re...