Study guide
CSA study guide
Read a lesson, then practice the ideas you want to remember.
Lessons
- AWS and Google Cloud Platform SOC Architectu
- Azure Security Operations with Microsoft Sen
- Cloud SOC Foundations and Shared Responsibil
- Network, Host, and Password Attack Technique
- Social Engineering, Email Threats, and Insid
- Application, Web, and Session Attack Vectors
- Digital Forensics Fundamentals and Evidence
- Host, Network, and Memory Forensics Triage
- Malware Analysis Techniques for SOC Responde
- Current Exam Facts, Blueprint, and Study Pla
- Containment, Eradication, Recovery, and Root
- Incident Triage, Ticketing, and Prioritizati
- Incident Response Frameworks and the SOC-IRT
- Endpoint Detection and Response and Extended
- Security Orchestration, Automation, and Resp
- Specialized Incident Response Playbooks
- Centralized Logging Architectures and Pipeli
- Log Fundamentals, Sources, and Host Logging
- Log Parsing, Normalization, and Field Extrac
- Network Device, Web Server, and Database Log
- SOC Maturity, Generations, Metrics, and KPIs
- SOC Architectures, Sourcing Models, and Orga
- SOC Overview, Capabilities, and Operational
- Alert Triage Methodology and False Positive
- Host and Application-Level Incident Detectio
- Network-Level and Behavioral Anomaly Detecti
- SOC Dashboards, Visualizations, and Reportin
- Detection Rule Engineering and Sigma Rules
- SIEM Architecture, Components, and Deploymen
- SIEM Use Case Development Lifecycle — Free Study Guide 2026
- Indicators of Compromise, Indicators of Atta
- Cyber Kill Chain and Diamond Model of Intrus
- MITRE ATT&CK and MITRE D3FEND Frameworks for
- Threat Hunting Techniques with PowerShell an
- Threat Hunting Principles, Frameworks, and P
- YARA Rule Crafting and Threat Hunting Toolin
- Cyber Threat Intelligence Lifecycle and Inte
- Threat Intelligence Sources, Formats, and Pl
- Integrating Threat Intelligence into SOC and