SOC Analyst 1-2-3: The Complete Field Guide

SOC Analyst 1-2-3: The Complete Field Guide is a 493-page, 70-chapter guide that takes you from networking basics all the way to senior SOC analyst. It covers SOC Levels 1, 2 and 3, plus cloud security on AWS and Azure/Microsoft 365.

It starts where every alert starts: the network. You learn how traffic moves and what attacks look like in the logs. Then you climb the SOC career ladder one level at a time.

Every chapter includes highlighted key terms, a realistic worked example, key takeaways and common pitfalls. It's built to be studied like a field manual, not just read once.

What's inside:

• 7 parts in the same order as the SOC Analyst 1-2-3 app: Network Foundations → Network Attack Scenarios → SOC Level 1 → SOC Level 2 → SOC Level 3 → AWS Cloud Security → Azure & Microsoft 365 Security
• 70 chapters with worked examples using realistic logs, SPL and KQL queries, packet captures and investigation scenarios
• Networking from the ground up: IP addressing, TCP/UDP, DNS, firewalls, network telemetry and Wireshark
• Real attack scenarios: port scans, password spraying, RDP and SMB attacks, DNS tunnelling and the full credential attack chain
• Senior skills: threat hunting, detection engineering, SOAR, detection-as-code, malware analysis, DFIR and incident command
• 5 appendices: a 300-term glossary, a Windows & Sysmon Event ID reference, a MITRE ATT&CK® quick reference, a career roadmap checklist and an app quick guide

Practise every chapter in the app: each chapter ends with a "Practice this in the app" box. It points you to the exact lesson, lab and cases in the free SOC Analyst 1-2-3 app on Google Play.

Format: you get both PDF and EPUB, so you can read it on any device or e-reader.

Try before you buy: download the free sample from our website.

Brought to you by SecTechMaster.