Almost every alert a SOC analyst works ends up on a real machine, and that machine is running Windows or Linux. To tell normal activity from an attack you need to know how an operating system manages processes, memory, and files, and how to question it from the command line. This module builds that comfort before you start digging into logs and security tools.
You'll start with how operating systems work under the hood, then learn the command line basics that apply to any terminal. From there you'll practise on Linux and on the Windows command prompt, using commands like ipconfig, tasklist, and netstat to check network settings, running processes, and open connections.
Once you're comfortable here, move on to Threat Landscape & Attack Frameworks to learn who attacks systems like these and how their behaviour is described.
What an operating system is, how it runs and manages other programs, and how memory protection, multitasking, and virtual memory developed.
An introduction to working in a terminal: moving around the file system, managing files and directories, and reading and writing data from the command line.
A beginner course on Linux, from what it is to working confidently in the terminal, giving you the footing for the Linux systems you will meet in a SOC.
Windows Command Prompt commands for network settings, DNS, running processes, and open connections, including ipconfig, nslookup, tasklist, taskkill, and netstat.