112-56 (CEH SOC Essentials) Certification

• Cyber Threats: Intent, Motive, Goal
• Tactics–Techniques–Procedures (TTP)
• Opportunity, Vulnerability, Weakness framework
• Types of Vulnerabilities, Threats & Attacks
• Network-, Application-, Host-, Insider-based Attacks
• Malware, Phishing, and Social Engineering
eccouncil.org+3eccouncil.org+3newhorizons.com+3

• What is a SOC & its Importance
• SOC Team Roles and Responsibilities
• SOC KPIs, Metrics, and Maturity Models
• SOC Workflow and Core Processes
• Operational Challenges in SOC environments ec-councilinternational.myshopify.com+6eccouncil.org+6newhorizons.com+6

• People, Processes & Technologies in SOC
• SOC Architecture and Infrastructure
• Different SOC Models and Their Purposes
• Introduction to SIEM: Architecture, Logs & Data Sources
• SIEM Deployment Models, Networking & Endpoint Data ec-councilinternational.myshopify.com+8eccouncil.org+8newhorizons.com+8

• Incidents, Events, and Logs explained
• Common Log Sources and Formats
• Local vs Centralized Log Management
• Logging Best Practices & Tool Overview eccouncil.org+4eccouncil.org+4eccouncil.org+4

• SIEM Use Case Development
• Security Monitoring and Analysis Techniques
• Correlation Rules, Dashboards, and Reporting
• Alerting, Triaging, and Handling False Positives
• Incident Escalation & Ticketing Systems
• Communication and Escalation Protocols
cert.eccouncil.org+4eccouncil.org+4newhorizons.com+4

• Threat Intelligence Sources & Types
• Intelligence Lifecycle and SOC Integration
• Feeds, Sharing, and Platform Tools
• Introduction to Threat Hunting
• Hunting Techniques & Methodologies
• Using Threat Intelligence in Hunting workflows
cert.eccouncil.org+9eccouncil.org+9newhorizons.com+9eccouncil.org

• Incident Handling Processes
• Classification and Prioritization of Incidents
• Incident Response Lifecycle: Preparation → Identification → Containment → Eradication
→ Recovery → Post-Incident Analysis & Reporting