Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Create account

This course is coming soon. It is not yet open for enrollment, and no payment is taken.

The outline and outcomes below reflect what this course will cover. Check back soon.

Coming soonIntermediate

Splunk for SOC Analysts

Turn a security question into an SPL answer.

By LearnDefend Security Team · SOC & Blue Team

About this course

An analyst-first Splunk course: search and filter with SPL, aggregate with stats and timechart, and run real SOC investigations across authentication, endpoint and network logs — complementing the hands-on Splunk Tool Academy.

What you'll learn

  • Write precise SPL searches and aggregations.
  • Surface anomalies with stats and timechart.
  • Run a multi-source SOC investigation.

Course outline

  1. 1SPL search & filter
  2. 2Aggregation & visualization
  3. 3Correlation across sources
  4. 4Final investigation

Prerequisites

  • SOC fundamentals; log-reading comfort.
Splunk for SOC Analysts | LearnDefend