Certified SOC Analyst (CSA)

C|SA thoroughly covers the fundamentals of SOC operations, before relaying the knowledge of log management and correlation, SIEM deployment, advanced incident detection, and incident response. Additionally, the candidate will learn to manage various SOC processes and collaborate with CSIRT at the time of need. 

-  3 days (9 AM – 5 PM)  

-  Minimum of 24 hours   

Certification

After the completion of the CSA training, candidates will be ready to attempt the Certified SOC Analyst exam. Upon successful completion of the exam, with a score of at least 70%, the candidate will be entitled to the CSA certificate and membership privileges. Members are expected to adhere to recertification requirements through EC-Council’s Continuing Education Requirements. 

1.  End-to-End SOC workflow 

2.  Incident Detection with SIEM  

3.  Incident Detection with Threat Intelligence  

4.  Understanding of SIEM Deployment