Investigate Your First Incident: A SOC Analyst Practice Workbook” by Cyber Defense with Tray

Practice investigating security incidents before facing them on the job.

Created by Cyber Defense with Tray, this 25-page workbook helps cybersecurity beginners review evidence, make response decisions, and write clear incident notes.

Work through five fictional investigations:

• A phishing email and compromised account

• Suspicious PowerShell activity

• Malware execution and endpoint containment

• Unusual logins and unauthorized access

• Sensitive data uploaded to personal storage

Each case includes an evidence packet, follow-up findings, investigation questions, and an incident-report worksheet. Explained answer walkthroughs help you understand why each decision is supported.

Practice documenting Observables, Analysis, Actions, and Follow-up—the information a clear incident report needs.

Includes five cases, printable worksheets, answer walkthroughs, a glossary, and practice scoring.

Format: Downloadable PDF. No physical book, software, or live lab is included. Print it or use PDF annotation tools. Educational practice; no certification or employment guarantee.