Security operations center (SOC) operations and analysis

Module title:

Security operations center (SOC) operations and analysis

Module overview:

The goal of the course is to equip students with theoretical knowledge and practical skills necessary for working in a Security Operations Center (SOC). Students will become familiar with methods of monitoring, analyzing, and responding to cyber threats, as well as managing incidents and security technologies used in SOCs.
In this module students will learn:
methods for monitoring and analyzing security events within a SOC environment.
techniques and tools for detecting, investigating, and responding to cyber incidents.
principles of managing security incidents and incident response.
application of best practices and security standards in SOC operations.

Literature:

Required readings:
1. Muniz, J. (2021) The Modern Security Operations Center: The People, Process, and Technology for Operating SOC Services. Addison-Wesley

Supplementary readings:
1. Muniz, J., McIntyre, G., and AlFardan, N. (2015). Security Operations Center: Building, Operating, and Maintaining Your SOC. Cisco Press.