Security Defense Analysis with Splunk and Threat Intelligence
Learn to investigate and respond to cyber threats using Splunk and modern threat intelligence data sources to kickstart your career as a security operations analyst.
-
💬
AI instructor
Ask about any lesson and get a clear answer instantly, anytime. -
🕐
Start anytime
No schedules or deadlines — learn at your own pace, whenever suits you. -
🌐
In English
Lessons, tasks and certificate — all fully in your language.
About this course
Course contents
6 modules · 29 lessons · 3h 2m
1
Foundations of Security Operations
Understand the role of a SOC and the modern threat environment.
- The Life of a SOC Analyst
Overview of daily SOC workflows and responsibilities.6 min - Speaking SOC: Key Terminology
Essential glossary of security operations terms.6 min - The Modern Threat Landscape
Understanding current cyber threats and attack vectors.6 min - Zero-Trust: A New Defense Mindset
Core principles of 'never trust, always verify' in defense.7 min - The Security Operations Framework
Foundational structure of how security teams function.6 min
2
Mastering Splunk for Log Analysis
Learn to navigate Splunk and perform basic security log queries.
- Getting Around in Splunk
Navigating the Splunk Web interface and Search app.6 min - Your First Search: SPL Basics
Writing basic Search Processing Language (SPL) queries.7 min - Log Investigation Workflows
Step-by-step process for tracing an event through logs.7 min - Filtering and Time Modifiers
Narrowing down search results to find specific security events.6 min - Understanding Data Sources
How different logs (Windows, Firewall) appear in Splunk.7 min
3
Threat Intelligence Integration
Use threat intelligence to identify and profile cyber adversaries.
- TI Data Sources
Exploring OSINT, commercial feeds, and internal intelligence.6 min - Profiling Threat Actors
Identifying motivations and techniques of different attackers.6 min - Indicators of Compromise (IoCs)
Learning to spot IPs, hashes, and domains linked to attacks.6 min - Enriching Logs with Intelligence
Using TI to add context to Splunk search results.7 min - The Pyramid of Pain
Understanding which indicators are hardest for attackers to change.6 min
4
Incident Response & Investigation
Apply methodologies to investigate and mitigate security incidents.
- IR Methodologies: NIST vs SANS
Standard frameworks for handling security incidents.6 min - Investigating the Attack
Techniques for determining the scope and impact of a breach.7 min - Containment Strategies
How to stop an attack from spreading further.6 min - Eradication and Recovery
Removing the threat and restoring normal operations.6 min - Post-Incident Lessons Learned
Documenting findings to improve future defense.6 min
5
Detection and Visualization
Create alerts and dashboards to monitor security status.
- Configuring Alerting Rules
Setting up automated triggers for suspicious activity.7 min - Alert Triage and Prioritization
Determining which alerts need immediate attention.6 min - Introduction to Dashboards
The purpose of visual monitoring in a SOC.6 min - Building a Security Dashboard
Creating charts and tables to visualize security data.7 min - Monitoring Real-Time Threats
Using dashboards for continuous situational awareness.6 min
6
Practical Defense Scenarios
Apply all learned skills to realistic security scenarios.
- Scenario: Brute Force Attack
Detecting and responding to failed login attempts.7 min - Scenario: Suspicious Data Export
Investigating potential data exfiltration using Splunk.7 min - Zero-Trust in Practice
Applying zero-trust checks during an investigation.6 min - Course Wrap-up and Next Steps
Final review and advice for starting a SOC career.4 min
The 'First Responder' Incident Report
You are presented with a series of logs in a simulated Splunk environment showing a potential breach. You must perform a full investigation.
What you'll get
-
📜
Certificate of completion
Add it to your LinkedIn profile -
💬
Personal AI tutor
Stuck on a lesson? Ask your built-in tutor anything, any time. -
🎧
Audio version included
Learn on the go — no screen needed -
♾️
Lifetime access
Come back anytime, no expiry -
📱
Phone or computer
Works anywhere, any device -
💸
14-day refund
No questions asked -
⚡
Short & focused
3h 2m of practical content
Certificate of completion
Every course you complete on PickAClass issues a credential like this — original, with its own code, verifiable by URL, and detailed about what was actually demonstrated.
Reviews
No reviews yet — be the first to share your experience.
Learners also took
Cybersecurity Foundations and Security+ SY0-701 Preparation
Cybersecurity Awareness and Identity Security Fundamentals
Cybersecurity Analyst: Modern Threat Defense and Response
Cybersecurity Awareness and Threat Defense for Employees
Frequently asked
What do I need to take this course? +
Just a phone or computer with internet. No installs, no special hardware.
How do I pay? +
By card via Stripe. We don’t store card details — Stripe handles them securely.
Can I get a refund? +
Yes — full refund within 14 days, no questions asked.
How long will I have access? +
Forever. Once you purchase, the course is yours to revisit anytime.
Will I get a certificate? +
Yes. On completion you'll receive a certificate you can add to your LinkedIn profile.
Get 10 courses a month
Members get 10 courses of their choice every month for K0. No per-course charges — you pay only the subscription.
- ✓ 10 courses every month
- ✓ Cancel anytime
Renews monthly. Unused courses expire at the end of each billing month.