Path progressLoading saved progress…
Security operations dashboard for investigating threats
BEAT IT · CAREER LEARNING

SOC Analyst

Investigate threats. Protect what matters.

Video · Reading · AI Tutor · Resources · Labs · Real Job Practice
YOUR LEARNING STUDIOMicrosoft Security Operations — SC-200
Access & enrollment
BEAT IT LEARNINGLesson workspace
Video lesson

Checking your course access…

Please wait while we check your signed-in account.

Course overview, access & enrollment
BEAT ITBEAT IT TRAINING & STAFFING

Microsoft Security Operations — SC-200

Detect, investigate, and respond with Sentinel, Defender XDR, and KQL.

Loading course details…

Course resources & downloads

SC-200 course resources

Six lessons with worked investigations, KQL practice, detection validation and response design. Classroom cases are synthetic. Live tenant execution remains a separate lab.

Practice by typing, drawing with a stylus or mouse, or writing on the printable workbook. The workspace includes code and math symbols, local drafts and exportable evidence for peer or instructor review.

Path overview, free preview & registration
BEAT ITBEAT IT TRAINING & STAFFING

Detect. Investigate. Respond.

SOC Analyst Learning Path

Detect threats, investigate alerts, and respond using Splunk and Microsoft security tools.

FREE CAREER PATH PREVIEW

Explore the SOC Analyst roadmap.

Get a feel for the work. See what you’ll learn. Take your next step.

Best forBeginners and IT professionals moving into security operations
Career outcomesSOC Analyst, Security Operations Analyst, Incident Response Analyst

Your roadmap

Build skills in the right order.

Every phase adds knowledge, practice, and a portfolio result you can explain during an interview. Select an available course below to open its Video Lessons and Reading Lessons tabs.

01
CompTIA Security+

Security foundations

Build the networking, identity, risk, threat, and security-control knowledge needed for every SOC role.

NetworkingLinux basicsThreats and attacksIAMNIST CSF
Portfolio projectDocument a small organization's assets, threats, controls, and incident-response workflow.
02
Splunk Core Certified Power User skills

Splunk search and reporting

Move from Splunk fundamentals into searches, fields, reports, alerts, dashboards, and knowledge objects.

SPLFieldsDashboardsAlertsRegExCIM
Portfolio projectBuild a failed-login search, suspicious-IP alert, and executive security dashboard.
03
Splunk Cybersecurity Defense Analyst

SOC investigations

Practice investigation methods, threat hunting, Windows event analysis, and risk-based alerting.

Brute forcePassword sprayingPrivilege escalationThreat huntingEvent correlation
Portfolio projectInvestigate a suspicious successful login and write a complete incident report.
04
Microsoft SC-200

Microsoft security operations

Add Microsoft Sentinel and Defender skills for Azure- and Microsoft-focused SOC environments.

Microsoft SentinelDefender XDRKQLAutomationIncident response
Portfolio projectCreate a Sentinel analytic rule and investigate the resulting incident.

Technology toolkit

Tools and platforms you will practice.

SplunkMicrosoft SentinelDefender XDRWiresharkLinuxWindows Event LogsTryHackMeMITRE ATT&CK
All career pathsTrack this path