2025 Blue Team

This comprehensive course is designed to equip aspiring Blue Team analysts with the practical knowledge and skills needed to detect, analyze, and respond to cybersecurity threats in a Security Operations Center (SOC) environment. Through a hands-on and structured learning path, learners will explore essential tools, platforms, and techniques used by professional defenders.

What You'll Learn

• Foundations of SOC and Blue Teaming
  Start with a solid introduction to SOC roles and responsibilities, including core security processes and the Pyramid of Pain.
• Linux & Windows Fundamentals
  Learn command-line operations, PowerShell basics, and Windows OS internals to support effective monitoring and incident response.
• Log Analysis & Event Monitoring
  Understand how to interpret logs through Event Viewer and analyze artifacts like hash values to trace threats.
• Endpoint & Network Security Tools
  Get hands-on with leading tools like Let’s Defend, Wireshark, and Elastic SIEM, and learn how to monitor and detect anomalies.
• Network Protocols & Traffic Inspection
  Study the OSI model and explore traffic patterns using Wireshark to uncover malicious activity.
• Incident Response & Real-World Challenges
  Master the incident response lifecycle and practice with challenges like itsy-bitsy, simulating real-world threat hunting.
• Lab Setup Guidance
  Learn how to set up your own lab using VirtualBox and Windows 10 to practice everything safely.

Course Content Includes

• IOC & Pyramid of Pain
• Core SOC Processes & Event Viewer
• Linux and PowerShell Fundamentals
• Endpoint Detection Tools
• SIEM with Elastic Stack
• Let’s Defend Platform Usage and Monitoring
• Network Traffic Analysis with Wireshark
• Incident Response Procedures
• Real-life Blue Team Challenges
• Virtual Lab Setup (VirtualBox + Windows)

Who Should Enroll?