Security Operations Center - SOC Level 2

Expert Training

Training for Individuals

$1950

Upcoming Dates
See All Course Dates

Course Overview

Security Operations (SOC) 201 is an advanced course designed to elevate your ability to detect, investigate, and respond to complex cyber threats at scale. Building on the foundational skills from SOC 101, this course focuses on developing an effective investigative methodology and mastering the responsibilities of an Incident Responder or Threat Hunter.

Course Length:          3  days

Audience: This course is suited for Tier 2 Security/SOC Analysts, Tier 3 Security/SOC Analysts, Incident Responders, Threat Hunters, Digital Forensic Examiners.

Prerequisites:

  • SOC Level 1
  • Networking Fundamentals: Practical Help Desk (PHD) or equivalent
  • Operating System Fundamentals: Practical Help Desk (PHD) or equivalent
  • Security Operations Fundamentals
  • Network Traffic Analysis
  • Endpoint Security Monitoring
  • Log Analysis and Management
  • Security Information and Event Management (SIEM)
  • Basic Digital Forensics Exposure

What You're Going To Learn

  • Develop a robust and reliable investigator’s mindset to approach incidents methodically.

  • Learn industry-standard methodologies and tools for detecting, hunting, and responding to cyber threats across enterprise environments.

  • Gain experience performing incident response and threat hunting at scale.

  • Learn to investigate and identify advanced adversary tactics following the MITRE ATT&CK framework, including execution artifacts, lateral movement, credential theft, living off the land techniques, persistence, defense evasion, command and control, and many more.

  • Learn to perform effective attack timeline analysis, and guide effective incident response and remediation efforts.

  • Investigate the root cause of security incidents by uncovering the entry point.

Register for an Upcoming Date

Date Location Price Register
Dec 7, 2026 Boise/Online Live $1,950.00 Register

What's Included

  • 4 Days (32 Hours) of Live Instruction
  • Exam Voucher:
  • Practical SOC Analyst Associate (PSAA) ($249 value) – Entry Level
  • 1 exam attempt included
  • NO multiple-choice; NO capture the flag
  • 2 days to complete assessment
  • 2 days to complete report
  • 30+ Hours on On-Demand Training (6 months access)
  • 10+ Online Labs w/ Access Post-Training (50 hours access)
  • Private Discord Cohort and Instructor Access

Course Outline

Day 1:

  • Understanding the modern adversary
  • Introduction to incident response
  • Incident decision making
  • Introduction to threat hunting
  • Threat hunting teams, data sources, and maturity models
  • Cyber threat intelligence
  • Exploring the MITRE ATT&CK Navigator
  • Structured and unstructured threat hunting
  • Data transformation techniques
  • Data transformation in the command-line, PowerShell, and Splunk
  • Searching, aggregations, statistics, and visualizations

Day 2:

  • Understanding and categorizing anomalies
  • Masquerading
  • Ambiguous identifiers
  • Frequency and volume anomalies
  • Temporal anomalies
  • Location and environmental anomalies
  • Structure and format anomalies
  • Absence and suppression anomalies
  • Entropy analysis
  • Dissecting threat reports
  • Threat hunting lab
  • Tracing an attack chain
  • Hunting execution
  • Hunting malicious process trees
  • Hunting persistence
  • Hunting defense evasion
  • Hunting command and control
  • Hunting lateral movement

Day 3:

  • Collection at scale
  • Collection with WMI
  • PowerShell 101
  • PowerShell remoting
  • Remote collection frameworks
  • Triage artifact collection with KAPE
  • Incident response with Velociraptor
  • Windows memory structures
  • The Volatility framework
  • Process analysis
  • Command line analysis
  • Network analysis
  • Registry analysis

What to Expect at LeapFox

Knowledgeable Instructors

Our instructors are certified professionals. They are trained on the latest features and how to get the most out of software programs.

Hands-on Labs

No boring lectures! Our courses are designed to give students lots of time to practice what they are learning with hands-on exercises and projects.

Certificate of Completion

Receive a certificate of completion at the end of every course.

Up-to-date Curriculum

Each course comes with a helpful and up-to-date ebook which will contain instruction and practice exercises.

Time Saving Tips N Tricks

In each course, your instructor will show you tips and tricks that will save you time and make you more efficient.

Friendly and Helpful Staff

Our staff is dedicated to your success. Each team member is trained to provide the absolute best customer service possible.

Satisfaction Guarantee

If you aren't 100% satisfied with your experience at LeapFox, simply let us know, and we will make it right.

The thing I liked about my Excel class at LeapFox is the instructor took took the time to answer all my questions. I use Excel on a daily basis and have been able to save about 15 minutes a day on Excel tasks. Wouldn't hesitate to recommend LeapFox to anyone looking for great training.

Tamara Leavitt

Storm Finders

I had a great instructor who knew the material and was interested in my success and his role in my goals.

Doug M.

IT Professional

I took Excel and a number of other programs in the Microsoft Office suite at LeapFox. I'm living proof an old dog can learn new tricks. Great instruction, friendly staff.

Greg D.

Office Specialist

Look who Else is Using LeapFox

albertsons