The Complete SOC Handbook - Part 2

About this book

Part 1 gives you the foundation; Part 2 is where you do the work. Each of the 12 hands-on chapters follows the loop a real analyst follows: build a lab, simulate an attack, find its evidence, write a detection, investigate and document your findings. It covers SIEM labs with Wazuh, packet analysis, Windows and Active Directory attacks, web and API detection, detection engineering, forensics and malware analysis, cloud and containers, automation, threat intelligence and hunting, real incident case studies and specialized SOCs, and it ends with a capstone investigation. Finish Part 1 first, or keep it open beside Part 2. Every lab is meant for systems you own or are authorised to test, and low-memory paths let computers with 8 GB of RAM follow along.

• 20+ labs and exercises
• 1 capstone investigation
• 20 practice questions
• Low-memory lab paths for 8 GB computers

Look inside

Real pages from the book. Tap a page to enlarge it.

Contents 12 chapters

1. Hands-On SIEM Labs with Wazuh
2. Packet Analysis and Network Forensics
3. Windows and Active Directory Attacks
4. Linux, Web and API Attack Detection
5. Advanced Detection Engineering
6. Advanced DFIR and Malware Analysis
7. Cloud and Container SOC in Depth
8. SOAR and Automation Labs
9. Threat Intelligence and Hunting Labs
10. Real Incident Case Studies
11. Specialized SOCs: OT, Mobile, Insider, Fraud and MSSP
12. SOC Toolkit and Career Capstone

Also included

• Tools, datasets and practice resources
• Lab command cheat sheet

Details

Format

PDF (digital)

Level

Intermediate

Pages

77

Chapters

12

Domain

SOC Analyst

Also in SOC Analyst: The Complete SOC Handbook - Part 1 (₹149)