Overview

A high-level introduction to the general concepts of SOC (Security Operations Center) and SecOps (Security Operations Procedures). Concepts introduced include the Security Operations framework, people, processes, and technology aspects required to support the business, the visibility that is required to defend the business, and the interfaces needed with other organizations outside of the SOC.

Learn more about Palo Alto Networks: Palo Alto Networks Cybersecurity Academy

What You Will Learn

Analyze network traffic to identify suspicious activity and potential threats
Use the Application Command Center (ACC) to locate and investigate threats
Configure log forwarding to external systems for centralized monitoring
Implement vulnerability profiles and dynamic block lists to secure endpoints
Apply threat intelligence feeds to proactively block malicious sources

Best For

Learners interested in Security Operations Center (SOC) analyst roles
Professionals building skills in threat detection, log analysis, and incident response
Educators developing SOC and security operations curriculum with hands-on labs
Organizations training security teams on network traffic analysis and threat intelligence

Prerequisites

Basic understanding of networking concepts and cybersecurity fundamentals
Familiarity with firewall concepts (security policies, logging, traffic monitoring)
Completion of Cybersecurity Foundation or equivalent knowledge is recommended

Lab Exercises (8 labs)

#	Title
1	Network Traffic Analysis
2	Using the Application Command Center (ACC) to Find Threats
3	Analyzing Firewall Logs
4	Log Forwarding to Linux
5	Stopping Reconnaissance Attacks
6	Securing Endpoints using Vulnerability Profiles
7	Threat Intelligence
8	Using Dynamic Block Lists