SOC Core Skills

we covered 
1.Intro

2.OSI & TCP/IP

3.IP 

4.TCP

5.Three Ways Handshakes

We Covered :
1. CHAP (challenge Handshake Authentication Protocol)

2.tcpdump (Concepts & Practical Lab)

3.wireshark(Concepts & Practical Lab

all the slides we walk through "in the Networking section"

This session is about :

the most important Event Logs in Windows

Login Events ,Process creation Events , Firewall Events , object accessing / auditing , Service Creation ...and more

How Kerberos Works (authentication in windows )

We ended up with a lab (interpreting windows logs ) 

all the slide we walk through "in the OS Section"

We Covered :

• DeepBlueCLI Tool 
• CIS Benchmark 
• Server analysis 
• firewall logs analysis (txt files using Grep )

We covered
1. A Lab about velociraptor 

2. Vulnerability management

3. Security in SDLC 

4. A lab about Web testing