SOC_Level_1_Legacy.md

SOC Level 1 (Legacy) Learning Path

Type: Learning Path
Difficulty: Easy
Description:
This path will introduce a wide array of tools and real-life analysis scenarios, enabling 
you to become a successful Junior Security Analyst.

This path is now considered legacy and will soon be replaced by a new path. The refreshed 
path is a major upgrade and includes a deeper dive into endpoint and network threats, 
better explains security operations and SIEM triage, and omits some forensic topics rarely 
observed in SOC routines.

Web link: https://tryhackme.com/path/outline/soclevel1legacy

Included rooms

Cyber Defence Frameworks

• Junior Security Analyst Intro
• Pyramid Of Pain
• Cyber Kill Chain
• Unified Kill Chain
• Diamond Model
• MITRE
• Summit
• Eviction

Cyber Threat Intelligence

• Intro to Cyber Threat Intel
• Threat Intelligence Tools
• Yara
• OpenCTI
• MISP
• Friday Overtime
• Trooper

Network Security and Traffic Analysis

• Traffic Analysis Essentials
• Snort
• Snort Challenge - The Basics
• Snort Challenge - Live Attacks
• NetworkMiner
• Zeek
• Zeek Exercises
• Brim
• Wireshark: The Basics
• Wireshark: Packet Operations
• Wireshark: Traffic Analysis
• TShark: The Basics
• TShark: CLI Wireshark Features
• TShark Challenge I: Teamwork
• TShark Challenge II: Directory

Endpoint Security Monitoring

• Intro to Endpoint Security
• Core Windows Processes
• Sysinternals
• Windows Event Logs
• Sysmon
• Osquery: The Basics
• Wazuh
• Monday Monitor
• Retracted

Security Information and Event Management

• Introduction to SIEM
• Elastic Stack: The Basics