SOC Analyst — Tier 2
Building on the skills covered in the SOC Analyst - Tier 1 learning path, these four courses guide you through advanced log analysis, threat detection on hosts and containers, and automated remediation workflows. Engage in hands-on practice within live demo environments to gain experience analyzing real-time data using a free Datadog trial account.
This path is designed specifically for Tier 2 SOC Analysts and other roles responsible for deeper investigation, escalated incident handling, and coordinating response actions.
You’ll learn how to do the following:
Dive Deeper into Log Queries and Aggregations
Create visualizations for counts and statistics of log attributes. Build multiple queries and formulas. Use functions to transform data in visualizations. Aggregate logs based on patterns and transactions (related sequences of events).
Detect Host and Container Compromises with Workload Protection
Monitor file, network, process, and kernel activity with Workload Protection. Detect and investigate intrusions and running malware in real-time. Secure containerized and host-based workloads.
Automate Threat Investigation and Remediation with Security Workflows
Automate security investigation and remediation tasks with Datadog Workflow Automation and Cloud SIEM. Create security workflows using Cloud SIEM Content Packs and SOAR blueprints. Automate threat remediation in AWS using security workflows.
Getting Started with Incident Management
Learn how to manage incidents using Datadog Incident Management. By the end of this course, you'll know how to set up Incident Management, detect and declare incidents, and guide your team through resolution.
