RSA® Intelligence-Driven Event Analysis

Overview
Participants learn about intelligence-driven SOC processes, standard operating procedures (SOPs), and monitoring tools. They learn to recognize the formats associated with the various sources of information available in a network environment. The program follows the end-to-end workflow of a Security Analyst, including all appropriate steps that are needed to handle each type of identified security incident.

Program Objective
Upon completing the program, participants should be able to:
1. Identify the roles and responsibilities in a SOC.
2. Interpret sources of information in a SOC.
3. Describe how Security Analysts interact with information and data in the SOC environment.
4. Monitor incoming event queues for potential security events and/or incidents using various security
tools per operational procedures.
5. Perform initial investigation and triage of potential incidents.
6. Investigate/analyze an incident.
7. Escalate an incident for further analysis aligned to SOPs.
8. Document and communicate investigative results aligned to escalation and/or handoff SOPs.
9. Walk through an incident from alert to escalation to closure.
10. Apply concepts that are learned in the classroom setting to their specific working environment

Who Should Attend
• IT professionals with 2 to 3 years of experience in a troubleshooting role, such as a systems/network engineer, a system administrator, network operations analyst, or a newly-hired security analyst. Knowledge of security fundamentals is required.