Practical learning · 8 projects
Cyber Security: from zero to SOC analyst: projects and labs
Learn by doing: labs for each module, a project for each level, a capstone and a project exam. Every step is checked, and your work stays on this device.
Beginner
- Lab1.5 h · 5 stepsLab: a password checker for a college portalA college in Bhopal is launching a student portal and wants to stop weak passwords at sign-up. You write the checker in Python: length, kinds of characters, a list of leaked passwords, and a final verdict. Then you protect your own email account with multi-factor authentication.Not started
- Lab1.5 h · 5 stepsLab: reading a clinic's networkA small clinic in Indore has one office network. You write Python helpers that every security analyst uses: how many devices fit in a network, whether an address is inside it, what kind of address a log line shows, and which open ports leak data in clear text. Then you find your own computer's address.Not started
- Lab1 h · 4 stepsLab: is this file the real one?An accounts office in Surat downloads its billing software and keeps important files on a shared PC. You use SHA-256 hashes in Python to verify a download and to spot which files have been changed, then hash a real file on your own computer.Not started
- Project3 h · 6 stepsProject: catch a password-guessing attackAn engineering college's lab server is open to SSH from the internet. Its log shows a burst of failed logins. You write a Python detector that parses the log, counts failures per address, flags the attackers, and finds the one login that worked. Then you read the same kind of log on your own Linux VM.Not started
Intermediate
- Project4 h · 8 stepsProject: investigate a phishing alertThe email gateway at a chartered accountants' firm in Pune flagged a fake "income tax refund" email during ITR season. As the L1 analyst you check the sender and its SPF, DKIM and DMARC results, find who clicked and who typed their details in, match the proxy log against threat-intelligence indicators, set the priority and write the incident ticket.Not started
- Project exam1 h · 6 tasksProject exam: SOC L1 practicalA timed practical in the style of a SOC L1 technical round. In one hour you write six small Python checks for a co-operative bank: network membership, hash verification, failed-login counting, attacker detection, look-alike URLs and the CERT-In reporting deadline. Every task is checked when you hand in; no hints or answers are shown.Not taken
Expert
- Project4 h · 6 stepsProject: detection coverage with MITRE ATT&CKA UPI payments start-up in Bengaluru asks: "Can we actually detect the attacks that matter to us?" You map its SIEM rules and alerts to MITRE ATT&CK, measure coverage, list the gaps by tactic, score the top risks, work out the CERT-In reporting deadline, and write a one-page memo for the CISO.Not started
- Capstone8 h · 11 stepsCapstone: a mini SOC toolkit for a clinicSunrise Multi-speciality Clinic in Kochi has no security team, and something odd happened last night. You build a Python toolkit that finds leaked passwords, changed and new files, a brute-force attack that succeeded, traffic to known-bad addresses, scores each finding and prints one clear report. Then you take a real integrity baseline on your own Linux VM and write it all up for your portfolio.Not started