Real Truths of SOC Analyst Life (Dropping Knowledge)

[@stonesteppin]

This is one for my bookmarks, it's the kind of information you would get from a mentor on the job. For those of us that want to avoid learning to do only the bare minimum.

[@SimplyCyber]

Brandon’s the best

[@marcschweiz]

I love listening to Brandon talk. He really knows his stuff and he's passionate about it

[@SimplyCyber]

Brandon is a treasure. Love having him on the show.

[@RichardOneill]

Great channel provided information about SOC, I’m on process to change career nurse to Cyber Security. Any advice I happy to 👂🏾

[@MrFontaineInc]

I just recently set up an ELK environment at home and I love it!

[@SimplyCyber]

That is awesome!

[@rayancrasta7460]

Is is this a clip from a larger stream? Would love to watch that too

[@SimplyCyber]

It is. We were loading and configuring Lima Charlie edr. I’m still producing it. It was over 2 hours long. Lol

[@rayancrasta7460]

@@SimplyCyber oh okay.. thanks will wait for this 🔥

[@adeshaher3109]

CEH Practical can helps get job in SOC for fresher's?

[@MrFontaineInc]

CEH provides a great intro into types of threat actors and TTPs but I would recommend looking into eJPT as well to provide hands on perspective.

[@SimplyCyber]

Agree here. CEH is a book based knowledge. Pentesting is very much a hands on keyboard skill and this is why CEH is less respected upon by practitioners. eJPT is a good entry level cert.

[@johndank2209]

By "book based knowledge" do u mean CEH is just theory? I'm new to all this.

[@mustafajpt9181]

nice video man

[@SimplyCyber]

Thanks so much! Brandon has so much knowledge in his area. Its a treasure trove!

[@n_9565]

How does one not be a script kiddie? I am at the begging of my CIS degree and I am not that creative when It comes to programming.

[@SimplyCyber]

I think what Brandon was saying is believing that your detections are excellent because you just turned on a bunch of rules, but not knowing that they are one dimensional and brittle so likely not catching everything OR saturating you with false positives. Do not confuse it with being new to the area and learning. Everybody starts somewhere and nobody knows everything for sure. I really believe its more about the confidence of just downloading a bunch of other peoples rules and throwing them in your environment and feeling like the job is done without having the understanding of WHAT the rules are actually detecting on. This understanding is important.

[@faizankhd]

I want to learn splunk , elk siem to detect cyber kill chain attack

[@SimplyCyber]

SPlunk has a lot of free training on their site.