Stage 2 of the Cybersecurity & DevSecOps Engineer track (weeks 24): working in a security operations centre: SIEM and searching at scale, endpoint telemetry, writing and testing Sigma detections, alert triage and threat intelligence, network detection with Suricata, incident response and forensics basics, vulnerability management and cloud security monitoring on AWS, Azure and Google Cloud, with one realistic dataset throughout. Capstone 2: Run a simulated SOC shift. Certification targets: CompTIA CySA+; optionally Microsoft SC-200 or Splunk Core Certified User.
Free for self-study: join with the enrolment key, or ask the administrator through Contact site support.