Useful resources for SOC Analyst and SOC Analyst candidates.

The repository is a valuable resource for individuals looking to enhance their knowledge and skills in cybersecurity. It provides in-depth materials and guides for various cybersecurity domains.

Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.

Complete career paths for SOC, Pentesting, Blue Team, Red Team & more

Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, podcasts, Twitter/X accounts and a set of tools relevant to the role of SOC analyst.

Ultimate Cybersecurity Roadmap (2025 Edition) | Beginner to Advanced Guide | Learn Ethical Hacking, SOC Analysis, Threat Hunting, Incident Response, and More by Shaikh Minhaj (Cyber With Minhaj)

🛡️ Master the essentials of SOC/Security Analysis with our 12-day SOC Analyst Prerequisites Learning Path, covering Linux, Windows, networking, scripting, and penetration testing—your key to a solid foundation in information security. 🚀

Built a mini HoneyNet in Azure and ingest log sources from various resources into a Log Analytics workspace

Complete SOC Analyst Training Roadmap 2026: 10 hands-on projects (SIEM, SOAR, TIP, ML) for automation-first defenders

A curated collection of essential resources, tools, and references for Security Operations Center (SOC) analysts.

SOC Analyst Write-Ups for LetsDefend Certification. Detailed incident analysis, investigation steps, logs review, and blue team methodology.

A hands-on, end-to-end cybersecurity SOC analyst training lab designed to simulate real-world scenarios in a safe environment. This 30-day challenge walks through setting up a full SOC infrastructure and investigating common attack patterns using industry tools.

AI-powered SOC analyst for Azure Sentinel threat hunting with GPT and VirusTotal integration.

Active Directory & Wazuh SIEM cybersecurity capstone lab with attack simulation and detection.

A script to that checks for active connections to known malicious foreign IP addresses.

The most comprehensive, step-by-step roadmap for breaking into defensive cybersecurity. From absolute zero to your first Blue Team role. Every skill, tool, certification, and resource you need. No experience required.

Fully automated SOC home lab with Splunk SIEM, Windows 10 victim, and Kali Linux attacker. Deploys with Vagrant. Includes Sysmon, event log forwarding, and detection rules.

Information Security, Risk mgmt. and Forensics.

Detection engineering portfolio — 210 detections across Sigma/Wazuh/Splunk, 10-agent Wazuh deployment, CI-verified proof artifacts, automated triage pipeline. Built from zero in 7 months.

🛡️ Deploy a powerful cybersecurity learning platform with 15+ integrated open-source tools to enhance your skills in security testing and education.