BCBDCyberLab
Home / Courses / SOC, SIEM & Threat Hunting
Blue Team

SOC, SIEM & Threat Hunting

A blue-team focused program for analysts and managers covering SOC operating models, log strategy, SIEM use cases, detection engineering, alert triage, incident escalation, threat hunting, and continuous improvement.

Course Overview

A blue-team focused program for analysts and managers covering SOC operating models, log strategy, SIEM use cases, detection engineering, alert triage, incident escalation, threat hunting, and continuous improvement.

Key Learning Areas

  • SOC roles, tiers, workflows and operational metrics
  • Log source strategy and priority telemetry
  • SIEM architecture, normalization and use-case lifecycle
  • Detection logic, correlation and alert enrichment
  • Alert triage and incident escalation workflow
  • Threat hunting hypotheses and investigation notebooks
  • SOC reporting for technical and management audiences

Training Methodology

The course blends concise instructor briefings, guided demonstrations, practical exercises, scenario discussion, worksheets and structured review. The exact lab mix can be adjusted for a corporate batch and the organization’s technology environment.

Who Should Attend

Cybersecurity professionals, IT teams, auditors, risk and compliance practitioners, incident response personnel, system administrators, developers or managers whose responsibilities align with the subject matter of this programme.