Innomerc Learn
English is the default.
Topic · 6 lessons

SOC & Detection

Turn scattered events into questions, evidence and investigation.

Evidence and investigation

Logs: What Happened, and What Is Still Unknown?Read an event record without confusing an observation with proof of an attack.6 minLessonSIEM ExplainedFollow a security event from collection through normalization, correlation and analyst investigation.6 minLessonEDR ExplainedConnect process, file and network activity on a device, then evaluate a response with context.6 minLessonIncident Response: From Report to RecoveryLearn how to contain harm, gather evidence and restore service with clear ownership.7 minLessonThink Like an Analyst: Triage a Sign-in AlertWork through fictional evidence, competing explanations and a justified next action.7 minLesson

Detection and behavior

Detection Coverage Is More Than an ATT&CK LabelSeparate a mapped analytic from tested visibility and a working response.7 minLesson

Paths through this topic