SOC-200 - Foundational Security Operations and Defensive Analysis
SOC-200 & OSDA certification
Foundational Security Operations and Defensive Analysis: detect, trace and escalate attacks from the SOC's point of view.
- OffSec Defense Analyst (OSDA)Entry defensive
Who it is for
- Tier 1 and 2 SOC analysts
- Blue team newcomers
- Basic Windows, Linux and networking knowledge
What you learn
- Monitoring Windows and Linux endpoints
- Network detection
- Detecting Active Directory attacks
- SIEM fundamentals and correlation
- Detecting web and client-side attacks
- From alert to incident
Certification
OffSec Defense Analyst (OSDA)
Proctored hands-on exam in a SIEM environment: detect and document live attacks.
Why buy through XPLT
Local B2B invoicing in EUR or AED.
One counterpart for licence, term and rollout.
Optional guidance from XPLT instructors.
FAQ
Is SOC-200 only for blue teams?
Its focus is detection. Pentesters still benefit from seeing their own traces.
Which tools are used?
A SIEM lab environment with realistic Windows and Linux telemetry.
Can I buy SOC-200 for my whole SOC?
Yes, we issue team licences with local invoicing.
Ready for OSDA?
Send us your requirement and we will reply with a tailored quote.