🛡️ SOC Analyst Journey

A practical, hands-on learning journey focused on Security Operations, Blue Team operations, networking, Linux, SIEM, IDS/IPS, EDR and incident investigation.

🎯 Objective

Build practical SOC Analyst skills through:

• Security monitoring
• Log analysis
• Network security
• Linux
• Windows security
• IDS/IPS
• SIEM
• Threat intelligence
• EDR
• Incident investigation

🧪 Learning Method

Each topic follows:

Theory ↓ Practical Lab ↓ Evidence ↓ Investigation ↓ Documentation ↓ Interview Preparation

📚 Roadmap

📚 SOC Analyst Roadmap

Day	Topic	Status
01	SOC Fundamentals	✅ Completed
02	Windows Event Logs & Authentication	✅ Completed
03	Windows Authentication Attack Detection	✅ Completed
04	Networking for SOC	✅ Completed
05	Linux for SOC	⏳ Upcoming
06	Network Traffic Analysis & Wireshark	⏳ Upcoming
07	Snort IDS/IPS	⏳ Upcoming
08	Suricata IDS/IPS	⏳ Upcoming
09	SIEM Fundamentals	⏳ Upcoming
10	Splunk Hands-on	⏳ Upcoming
11	OSINT & Threat Intelligence	⏳ Upcoming
12	EDR & Endpoint Security	⏳ Upcoming
13	Incident Investigation	⏳ Upcoming
14	Detection & Alert Analysis	⏳ Upcoming
15	SOC Investigation Case Study	⏳ Upcoming

🔧 Tools

• Windows Event Viewer
• Linux
• Snort
• Suricata
• Splunk
• Elastic Stack
• VirusTotal
• AbuseIPDB
• EDR platforms
• Wireshark
• Git & GitHub

⚠️ Disclaimer

All security testing and practical exercises are performed in controlled laboratory environments for educational purposes.