SOC Analyst Starter Kit v1.0

Build practical SOC analyst skills through hands-on detection, investigation, correlation, and reporting—not just theory.

The SOC Analyst Starter Kit v1.0 is a structured cybersecurity training and portfolio-development package designed for aspiring SOC analysts, cybersecurity students, IT professionals transitioning into security, certification learners, and home-lab builders.

Work through 10 guided SOC labs that progress from individual detections to multi-stage behavioral correlation and a complete capstone SOC investigation.

Inside the Starter Kit:

• 10 hands-on SOC labs
• 6 reusable analyst templates
• 7 operational SOC checklists with 669 individual checklist items
• 4 completed reference solution sets
• PowerShell detection and correlation scripts
• Python SOC log-analysis tooling
• Detection, investigation, evidence-handling, and incident-reporting resources
• MITRE ATT&CK mapping examples
• Portfolio-building guidance
• Structured learning path and supporting resources

The 10-Lab Learning Path

1. Linux Authentication Detection
2. Suspicious PowerShell
3. Network Reconnaissance Detection
4. SSH Brute-Force Detection
5. SSH Success-After-Failure Detection
6. Windows Identity, Privilege & Process Correlation
7. PowerShell Behavioral Detection
8. Windows Multi-Stage Behavioral Correlation
9. Detection-to-Incident Workflow
10. Capstone SOC Investigation

Practice the analyst workflow

Detect → Triage → Investigate → Correlate → Map → Disposition → Document

Learn to distinguish between what a detection identifies and what the available evidence actually supports. The kit emphasizes evidence-driven analysis: a detection identifies behavior worthy of investigation; context and evidence determine what that behavior means.

Build portfolio-ready evidence of your work

Use the included templates, investigation materials, completed reference examples, and portfolio guidance to document your own analytical process and present your hands-on cybersecurity work professionally.

Designed for:

Aspiring SOC Analysts • Cybersecurity Students • IT Professionals Transitioning to Security • Home-Lab Builders • Certification Learners • Cybersecurity Portfolio Builders

Digital Product: Delivered electronically. No physical product is shipped.

For educational and authorized lab use. Completion of the kit does not guarantee employment, certification, or any particular professional outcome.

Build It. Detect It. Investigate It. Document It.