learn / blue-team

Blue Team & Security Operations

Life in a security operations center (SOC) — logs, security information & event management (SIEM), alert triage, endpoint detection & response (EDR) and playbooks.

(•‿•) this track is mapped out and being written. modules light up as they go live.

1. [ ]B1 Security Operations Center (SOC) Roles & TiersL1 foundations · coming soon
2. [ ]B2 Log SourcesL2 core skills · coming soon
3. [ ]B3 Security Information & Event Management (SIEM)L2 core skills · coming soon
4. [ ]B4 Alert TriageL2 core skills · coming soon
5. [ ]B5 Endpoint Detection & Response (EDR)L2 core skills · coming soon
6. [ ]B6 Email SecurityL2 core skills · coming soon
7. [ ]B7 Automation & Playbooks (Security Orchestration, Automation & Response)L3 specialist · coming soon
8. [ ]B8 Security Operations MetricsL3 specialist · coming soonend of track