Intermediate
SOC & Blue Team Path
Prepare for a Tier 1/2 SOC analyst role
Build the detection and triage muscle: read telemetry, write detections and handle incidents methodically.
Path steps
1. Networking & OS fundamentals
Read packets and processes fluently.
2. Baseline certification
Security+ or equivalent grounding.
3. Log analysis
Stand up a home SIEM and query real events.
4. Detection writing
Author Sigma rules and tune out noise.
5. Incident practice
Write clear handovers and post-incident notes.