Kirish Ro'yxatdan o'tish

HackNow

Sentinel — Learning Path | HackNow

Medium

O'quv yo'li

Sentinel

SOC Analyst Level 2 — Advanced SIEM, Detection Engineering, Threat Hunting va Incident Response.

44 sinf~60 soat0/44 yakunlandi

socsplunkelkthreat-huntingdfir

0%Progress

Bu yo'nalish — Premium

Sinflarni ochish uchun Premium obuna kerak. Dastlabki 3 ta yo'nalish — Cyber Horizons, Ground Zero, First Blood — bepul.

1

Log Analysis — chuqur tahlil

0/6

Windows Event Logs chuqur tahlil

Sentinel — Log Analysis — chuqur tahlil yo'nalishi bo'yicha sinf.

Linux syslog va journal tahlili

Sentinel — Log Analysis — chuqur tahlil yo'nalishi bo'yicha sinf.

Web server loglari tahlili

Sentinel — Log Analysis — chuqur tahlil yo'nalishi bo'yicha sinf.

Firewall va proxy loglari tahlili

Sentinel — Log Analysis — chuqur tahlil yo'nalishi bo'yicha sinf.

PowerShell logging va ScriptBlock

Sentinel — Log Analysis — chuqur tahlil yo'nalishi bo'yicha sinf.

Log centralization va normalization

Sentinel — Log Analysis — chuqur tahlil yo'nalishi bo'yicha sinf.

2

Advanced Splunk

0/5

SPL chuqur — subsearch, macro, lookup

Sentinel — Advanced Splunk yo'nalishi bo'yicha sinf.

Splunk data models va CIM

Sentinel — Advanced Splunk yo'nalishi bo'yicha sinf.

Custom dashboards va visualizations

Sentinel — Advanced Splunk yo'nalishi bo'yicha sinf.

Splunk alert va correlation search

Sentinel — Advanced Splunk yo'nalishi bo'yicha sinf.

Splunk Enterprise Security kirish

Sentinel — Advanced Splunk yo'nalishi bo'yicha sinf.

3

Advanced ELK Stack

0/5

Elasticsearch query DSL, aggregations

Sentinel — Advanced ELK Stack yo'nalishi bo'yicha sinf.

Logstash pipeline — filter, transform

Sentinel — Advanced ELK Stack yo'nalishi bo'yicha sinf.

Kibana Lens va visualizations

Sentinel — Advanced ELK Stack yo'nalishi bo'yicha sinf.

Filebeat va custom log ingestion

Sentinel — Advanced ELK Stack yo'nalishi bo'yicha sinf.

ELK detection rule yaratish

Sentinel — Advanced ELK Stack yo'nalishi bo'yicha sinf.

4

Detection Engineering

0/6

Detection engineering lifecycle

Sentinel — Detection Engineering yo'nalishi bo'yicha sinf.

Sigma rules — yozish va convert

Sentinel — Detection Engineering yo'nalishi bo'yicha sinf.

YARA rules — malware detection

Sentinel — Detection Engineering yo'nalishi bo'yicha sinf.

Snort va Suricata IDS rules

Sentinel — Detection Engineering yo'nalishi bo'yicha sinf.

Detection-as-Code tushunchasi

Sentinel — Detection Engineering yo'nalishi bo'yicha sinf.

False positive management

Sentinel — Detection Engineering yo'nalishi bo'yicha sinf.

5

Threat Hunting

0/5

Threat hunting metodologiyasi

Sentinel — Threat Hunting yo'nalishi bo'yicha sinf.

Hypothesis-driven hunting

Sentinel — Threat Hunting yo'nalishi bo'yicha sinf.

Anomaly-based hunting texnikalar

Sentinel — Threat Hunting yo'nalishi bo'yicha sinf.

Threat hunting va MITRE ATT&CK

Sentinel — Threat Hunting yo'nalishi bo'yicha sinf.

Hunting amaliy mashqlar

Sentinel — Threat Hunting yo'nalishi bo'yicha sinf.

6

Threat Emulation

0/5

ATT&CK Evaluations tushunchasi

Sentinel — Threat Emulation yo'nalishi bo'yicha sinf.

Atomic Red Team bilan emulation

Sentinel — Threat Emulation yo'nalishi bo'yicha sinf.

Caldera framework

Sentinel — Threat Emulation yo'nalishi bo'yicha sinf.

Purple teaming — Red va Blue

Sentinel — Threat Emulation yo'nalishi bo'yicha sinf.

Emulationdan detection yaratish

Sentinel — Threat Emulation yo'nalishi bo'yicha sinf.

7

Incident Response

0/6

IR lifecycle — NIST va SANS

Sentinel — Incident Response yo'nalishi bo'yicha sinf.

Triage va containment strategiyalari

Sentinel — Incident Response yo'nalishi bo'yicha sinf.

Evidence collection va chain of custody

Sentinel — Incident Response yo'nalishi bo'yicha sinf.

Memory forensics — Volatility

Sentinel — Incident Response yo'nalishi bo'yicha sinf.

Disk forensics — Autopsy, FTK

Sentinel — Incident Response yo'nalishi bo'yicha sinf.

IR amaliy mashq — to'liq intsident

Sentinel — Incident Response yo'nalishi bo'yicha sinf.

8

Malware Analysis

0/6

Malware analysis muhit sozlash

Sentinel — Malware Analysis yo'nalishi bo'yicha sinf.

Statik tahlil — IDA, Ghidra kirish

Sentinel — Malware Analysis yo'nalishi bo'yicha sinf.

Dinamik tahlil — API monitoring

Sentinel — Malware Analysis yo'nalishi bo'yicha sinf.

Network tahlil — malware C2

Sentinel — Malware Analysis yo'nalishi bo'yicha sinf.

Unpacking va deobfuscation

Sentinel — Malware Analysis yo'nalishi bo'yicha sinf.

Malware tahlil hisoboti yozish

Sentinel — Malware Analysis yo'nalishi bo'yicha sinf.