Towards a more effective system for training tier 1 SOC analysts
summary
Claims a concrete process that improves tier‑1 analysis and ships a prototype training tool built on Security Onion that auto‑fetches some fields, leaves uncertain values blank, and lets trainees run auto-generated queries to check alert history. A master's student implements the UI that nudges analysts to collect specific features, then plans usability testing, a controlled training comparison against current practice, and follow‑ups at two and four weeks to measure lasting accuracy gains.
AI-written summary · about
related talks
29mImplementing a Kick-Butt Training Program: BLUE TEAM GO!
53mSecurity Operations 2018: What Is Working? What Is Not.
36mSiloed to Unified: The Evolution of Security Analyst Experience
49mTraining for Incident Response: The Red, the Blue, and the Ugly
01h 01mAI and the SOC Engineer: The Evolving Human Element in Security
41mOne SOC, The Whole SOC, and Nothing But The SOC, So Help Me
41mState of the Onion
33mFree SOC? — how open source tools can come to our aid