SOC-200 Foundational Security Operations and Defensive Analysis by OffSec covers defending networks and systems against cyber threats. Learners gain practical experience in a hands-on, self-paced environment focused on SOC operations. Completing SOC-200 and passing the exam earns the OffSec Defense Analyst (OSDA) certification, demonstrating the ability to detect, analyze, and assess potential security incidents through live exercises. SOC-200 is designed for individuals with a solid foundation in networking and basic familiarity with Linux and Windows systems. While there are no formal prerequisites, it is strongly recommended that learners have competencies in core defensive methodologies. SOC-200 includes topics such as attack methodology introduction, Windows endpoint introduction, Windows privilege escalation, Linux endpoint introduction, network security incidents and detection techniques, and advanced methods for evading antivirus solutions. The course also covers the implementation, configuration, and maintenance of defensive security solutions like SIEMs, log analysis tools, and threat intelligence platforms. The OSDA exam is a 24-hour practical assessment of defensive security skills, requiring learners to identify, analyze, and respond to threats in a live lab environment, followed by the submission of an incident response report.
