Security Operations Center (SOC): How a Network Connection Works

​Join SecLeaf for an interactive Security Operations Center (SOC) session designed to help you understand how networks communicate, how attacks happen, and how security teams detect, investigate, and respond to suspicious activity.

​This session takes you from the fundamentals of networking and security to a practical SOC investigation workflow using Splunk, giving you a clear understanding of how a SOC analyst approaches real-world security incidents.

​What You'll Learn

• ​Introduction to Security Operations Center (SOC)

• ​How a Network Connection Works

• ​Network Security Fundamentals

• ​Understanding Network Traffic & Communication

• ​Attacker's Perspective – How Cyber Attacks Happen

• ​Common Attack Techniques & Indicators

• ​SOC Perspective – How Attacks Are Detected

• ​Security Monitoring & Alert Analysis

• ​Incident Investigation & Investigation Methodology

• ​Splunk Introduction for Security Monitoring

• ​Log Collection, Search & Analysis in Splunk

• ​Understanding Security Events & Indicators

• ​Hands-On SOC Investigation

• ​Investigating Suspicious Activity Using Logs

• ​Identifying Attack Patterns & Building an Investigation Timeline

• ​Q&A and Practical Discussion

​Who Should Attend

• ​Beginners interested in Cybersecurity & SOC

• ​Aspiring SOC Analysts

• ​Cybersecurity Students

• ​Networking & Security Enthusiasts

• ​Anyone looking to understand how security monitoring and investigations work in real-world environments

​What You'll Gain

​By the end of the session, you'll have a practical understanding of how network communication works, how attackers operate, how SOC teams detect and investigate attacks, and how SIEM tools such as Splunk are used for security monitoring and incident investigation.