CSA (Certified SOC Analyst)
Detect, investigate and respond to security threats from inside a Security Operations Centre.
The C|SA provides training and certification in the fundamental principles and practices of security operations, threat intelligence and incident response. It offers a deep understanding of the processes, technologies and techniques used to detect, investigate and respond to security threats.
The programme covers common attack vectors, security tools and technologies, security information and event management (SIEM), incident response processes and coordination, and the development of a SOC. Students gain proficiency in centralized log management (CLM), incident triaging, and recognising and investigating indicators of compromise (IoCs) and the cyber kill chain, so they can respond proactively to potential threats.
They also learn to recognise emerging threat patterns, develop correlation rules and write effective reports, and to use AI-enabled tools such as Splunk AI, Elastic AI, Copilot, ChatGPT and PowerShell AI to enhance SIEM, behaviour analytics and alert prioritisation, and to automate threat detection and hunting.
- Security operations
- Threat intelligence
- Incident response
- SIEM
- Centralized log management
- IoCs & cyber kill chain
- AI-enabled threat hunting
