Description
Exam Name: Certified SOC Analyst
Exam Code: 312-39
Related Certification(s): Eccouncil Certified SOC Analyst Certification
Certification Provider: Eccouncil
Number of 312-39 practice questions in our database: 100
Expected 312-39 Exam Topics, as suggested by Eccouncil :
- Module 1: Learn use cases that are widely used across the SIEM deployment/ Gain knowledge of Incident Response Process
- Module 2: Gain hands-on experience in SIEM use case development process/ Plan, organize, and perform threat monitoring and analysis in the enterprise
- Module 3: Understand the architecture, implementation and fine-tuning of SIEM solutions/ Gain Knowledge of SOC processes, procedures, technologies, and workflows
- Module 4: Gain hands-on experience in the alert triaging process/ Able to prepare briefings and reports of analysis methodology and results
- Module 5: Able to perform Security events and log collection, monitoring, and analysis/ Gain knowledge of administering SIEM solutions
- Module 6: Able to escalate incidents to appropriate teams for additional assistance/ Able to make use of varied, disparate, constantly changing threat information
- Module 7: Gain experience and extensive knowledge of Security Information and Event Management/ Able to monitor emerging threat patterns and perform security threat analysis
- Module 8: Gain understating of SOC and IRT collaboration for better incident response/ Gain knowledge of the Centralized Log Management (CLM) process
- Module 9: Able to develop threat cases (correlation rules), create reports/ Gain a basic understanding and in-depth knowledge of security threats, attacks, vulnerabilities
- Module 10: Gain knowledge of integrating threat intelligence into SIEM/ Able to recognize attacker tools, tactics, and procedures
Reviews
There are no reviews yet.