In this module students are exposed to the core elements and practices performed in a Security Operations Center. The module emphasizes that effective SOC administration focuses endpoint and security detection and response into six pillars: Processes, Affiliates, People, Business, Visibility, Technology. DevOps and DevSecOps processes are analyzed with the goal of employing a 'shift left' development approach which promotes security as a shared responsibility amongst all parties who work towards the goal of Continuous Integration and Continuous Delivery (CI/CD) in the software development and deployment lifecycle. Students are also introduced to AI-enabled technologies that can automate SecOps threat detection and response.

In this module students continue to explore core SOC elements and practices with an emphasis on the SOC Business pillar operations and activities.

In this module students analyze SOC infrastructure and discover ways to improve SOC operations using Security Orchestration, Automation, and Response (SOAR) technologies.

This module analyzes endpoint detection and response technologies and focuses on enterprise solutions such as Cortex XDR.

In this module students concentrate on threat intelligence core practices including collection, aggregation, sharing, analysis and organized response.

In this module students discover SOC process improvements delivered by AI-driven technologies.