SOC Tier 1 — the job, done from the ticket in

ブリーフィング

Tier 1 is not a knowledge job. Almost every fact you need is on the screen in front of you. The job is deciding, under time pressure and with an incomplete picture, which of the eleven things in the queue you touch first, and being able to say why out loud to somebody who was not there. So this segment is built out of the actual queue. A CVSS 9.8 with seven unpatched hosts behind it. Twelve people who cannot log in and an Active Directory team insisting nothing is wrong. A service account authenticating successfully seven times in fifteen minutes, which no alert will ever fire on. Three overnight VPN sessions from cities nobody travelled to. A leaver with a USB stick. A payment that went out an hour ago on the strength of an email. Every ticket lands before the lesson, the same way it does at work: five to thirty minutes ahead, no briefing, no hint about which one it is. You write a short report. The lesson is the debrief. You will be wrong on at least two of them. One of the six has a model answer with no technology in it at all, and the fastest analyst in the room will be the one who picks up a phone. A note on two of the tickets: CVE-2026-41089 and CVE-2026-50751 are teaching artefacts. They are written to behave exactly like real advisories and the numbers are invented for this course. Everything else — the host names, the timings, the log lines — comes from tickets that were worked, then anonymised.

1. 01 What Comes First

   3個のレッスン·1h 32m

   Nothing in this module is about how the vulnerability works. You will not be asked to explain Netlogon. You will be asked which box gets patched at 09:15 and which one waits until Thursday, which is…

2. 02 The Obvious Suspect

   3個のレッスン·1h 36m

   You are going to meet a symptom before you meet a cause, which is the normal order of events and the one every training course gets backwards. The skill being trained is asking for the right next…

3. 03 When Nothing Fails

   3個のレッスン·1h 59m

   Everything you have looked at so far announced itself. This module is the opposite case: a log where every single line is a success, and a VPN gateway where the sessions are valid. CVE-2026-50751 is…

4. 04 Saying It So Somebody Acts

   3個のレッスン·2h 7m

   Unresolved items first. Every item labelled ongoing or completed. Human language throughout — "someone's Windows PC", not "the endpoint". You will record yourself, listen back, and record it again,…

よくある質問

SOC Tier 1 — the job, done from the ticket inでは何を学べますか？

Six tickets, handed to you cold, in the order and the format a real shift hands them over. You decide what matters first and then defend the decision. Analysis and defence only — nothing here teaches you to attack anything.

事前の経験が必要ですか？

SOC Tier 1 — the job, done from the ticket inを開始する前に、ある程度の事前知識が推奨されます。

SOC Tier 1 — the job, done from the ticket inはどのくらいの時間がかかりますか？

SOC Tier 1 — the job, done from the ticket inには4個のモジュールと12個のレッスンが含まれています。自分のペースで学習できます。

アクセスするにはどうすればよいですか？

SOC Tier 1 — the job, done from the ticket inは任意の有料サブスクリプションに含まれています。