Scribd
Upload
199 views2 pages

SOC Analyst L1 Complete Notes

This guide serves as a comprehensive resource for preparing for a SOC Analyst Level 1 role, covering essential topics such as networking fundamentals, Linux and Windows basics, security principles, and SIEM operations. It includes practical skills, alert triage processes, phishing analysis, and important tools for cybersecurity. Additionally, it offers job preparation tips to enhance readiness for entry-level positions in the field.

Uploaded by

aarankshabansode
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
199 views2 pages

SOC Analyst L1 Complete Notes

This guide serves as a comprehensive resource for preparing for a SOC Analyst Level 1 role, covering essential topics such as networking fundamentals, Linux and Windows basics, security principles, and SIEM operations. It includes practical skills, alert triage processes, phishing analysis, and important tools for cybersecurity. Additionally, it offers job preparation tips to enhance readiness for entry-level positions in the field.

Uploaded by

aarankshabansode
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

SOC Analyst L1 – Complete Study Notes

This guide provides a structured foundation to prepare for a SOC Analyst Level 1 role. It covers
networking, operating systems, SIEM, incident response, and practical skills required for entry-level
cybersecurity jobs.

1. Networking Fundamentals (Very Important)

1 OSI Model: Understand the 7 layers and how data flows.


2 TCP/IP Model: Know differences between TCP and UDP.
3 Common Ports: HTTP(80), HTTPS(443), SSH(22), FTP(21), DNS(53).
4 IP Addressing: Private vs Public IP, subnetting basics.
5 DNS & DHCP: How devices resolve names and obtain IP addresses.
6 VPN Basics: Purpose and common enterprise usage.

2. Linux Basics for SOC

1 Important commands: ls, cd, pwd, grep, chmod, chown, ps, top.
2 Understand file permissions (rwx).
3 Know common log locations like /var/log/[Link].
4 Process monitoring and basic shell navigation.
5 Practice using Ubuntu or Kali Linux in VirtualBox.

3. Windows & Active Directory

1 Understand Windows Event Viewer and log types.


2 Basic PowerShell commands and usage.
3 Active Directory concepts: Domain, Users, Groups, OU.
4 Common attack types: Brute force, privilege escalation.
5 Importance of Windows Defender and endpoint security.

4. Security Fundamentals

1 What is a SOC and role of SOC Analyst L1.


2 Incident Response lifecycle: Preparation → Detection → Containment → Eradication →
Recovery → Lessons Learned.
3 Types of malware: Virus, Worm, Trojan, Ransomware.
4 MITRE ATT&CK; framework basics.
5 Difference between IDS and IPS.

5. SIEM Basics (Critical for Jobs)

1 SIEM collects and correlates logs from multiple sources.


2 Understand log ingestion and parsing.
3 Learn SPL queries in Splunk.
4 Create dashboards and alerts.
5 Understand use cases like brute force detection.
6. Alert Triage Process

1 Step 1: Validate whether alert is true positive or false positive.


2 Step 2: Check source and destination IP reputation.
3 Step 3: Review related logs and user activity.
4 Step 4: Escalate if malicious activity confirmed.
5 Step 5: Document the incident clearly.

7. Phishing Analysis Basics

1 Check sender email domain carefully.


2 Look for suspicious attachments and URLs.
3 Analyze email headers.
4 Use sandbox tools to inspect files safely.
5 Educate users and report confirmed phishing.

8. Important Tools to Know

1 Splunk – SIEM analysis.


2 Wireshark – Packet analysis.
3 VirusTotal – File and URL reputation.
4 TryHackMe – Hands-on labs.
5 LetsDefend – SOC simulation.

9. Job Preparation Tips

1 Build a home lab and practice daily.


2 Complete SOC Level 1 path on TryHackMe.
3 Document investigations on GitHub.
4 Prepare an ATS-friendly SOC resume.
5 Practice common SOC interview questions.

End of Guide – Keep Practicing Daily!

You might also like