soc · intermediate

Network Security Monitoring

Structured SOC intermediate learning room covering DNS, HTTP, connections.

Intermediate45 mins3 tasks50 XP

What you will learn

Section 1 · 1 tasks

Network event fields

This section uses a fictional, authorized training scenario. Study the concepts, compare the example evidence, and record what is observed versus what is inferred.

Practical guidance

Apply the DNS and HTTP concepts to a bounded exercise. Do not contact real systems, use real credentials, or execute destructive actions.

Section 2 · 1 tasks

DNS and HTTP evidence

This section uses a fictional, authorized training scenario. Study the concepts, compare the example evidence, and record what is observed versus what is inferred.

Practical guidance

Apply the HTTP and connections concepts to a bounded exercise. Do not contact real systems, use real credentials, or execute destructive actions.

Section 3 · 1 tasks

Baseline comparison

This section uses a fictional, authorized training scenario. Study the concepts, compare the example evidence, and record what is observed versus what is inferred.

Practical guidance

Apply the connections and baselines concepts to a bounded exercise. Do not contact real systems, use real credentials, or execute destructive actions.