01
SOC roles, workflows and evidence
Explain, demonstrate and verify **soc roles, workflows and evidence** using an authorised lab and a realistic Sierra Leone scenario.
- SOC roles, workflows and evidence60 min
← Course catalogue
CYB-250Advanced
Certification preparation
CompTIA CySA+-Aligned Preparation
Develop analytical security-monitoring and incident-response skills aligned to CompTIA CySA+; examination and certification remain with CompTIA.
Part of these pathways
Course outline: enrolment opens after THNF content and assessment review.
What you will be able to do
Clear outcomes. Practical evidence.
- Interpret security telemetry
- Prioritise vulnerabilities
- Investigate incidents
- Communicate analytical findings
Course structure
Modules and lessons
02
Threat intelligence and adversary behaviour
Explain, demonstrate and verify **threat intelligence and adversary behaviour** using an authorised lab and a realistic Sierra Leone scenario.
- Threat intelligence and adversary behaviour60 min
03
Asset visibility and attack-surface management
Explain, demonstrate and verify **asset visibility and attack-surface management** using an authorised lab and a realistic Sierra Leone scenario.
- Asset visibility and attack-surface management60 min
04
Vulnerability prioritisation and remediation
Explain, demonstrate and verify **vulnerability prioritisation and remediation** using an authorised lab and a realistic Sierra Leone scenario.
- Vulnerability prioritisation and remediation60 min
05
Logging architecture and SIEM fundamentals
Explain, demonstrate and verify **logging architecture and siem fundamentals** using an authorised lab and a realistic Sierra Leone scenario.
- Logging architecture and SIEM fundamentals60 min
06
Network and endpoint analysis
Explain, demonstrate and verify **network and endpoint analysis** using an authorised lab and a realistic Sierra Leone scenario.
- Network and endpoint analysis60 min
07
Detection engineering with Sigma concepts
Explain, demonstrate and verify **detection engineering with sigma concepts** using an authorised lab and a realistic Sierra Leone scenario.
- Detection engineering with Sigma concepts60 min
08
Threat hunting and hypothesis testing
Explain, demonstrate and verify **threat hunting and hypothesis testing** using an authorised lab and a realistic Sierra Leone scenario.
- Threat hunting and hypothesis testing60 min
09
Incident triage, containment and eradication
Explain, demonstrate and verify **incident triage, containment and eradication** using an authorised lab and a realistic Sierra Leone scenario.
- Incident triage, containment and eradication60 min
10
Digital evidence and post-incident analysis
Explain, demonstrate and verify **digital evidence and post-incident analysis** using an authorised lab and a realistic Sierra Leone scenario.
- Digital evidence and post-incident analysis60 min
11
Metrics, reporting and stakeholder communication
Explain, demonstrate and verify **metrics, reporting and stakeholder communication** using an authorised lab and a realistic Sierra Leone scenario.
- Metrics, reporting and stakeholder communication60 min
12
SOC investigation capstone
Explain, demonstrate and verify **soc investigation capstone** using an authorised lab and a realistic Sierra Leone scenario.
- SOC investigation capstone60 min
Access and progression
Know what the course requires.
The required capability matters; the learner does not have to personally own every device.
Who it is for
Aspiring developers, technical learners, career changers and practitioners seeking applied computing skills.
Hardware access
Personal 64-bit computer with 8 GB RAM and 60 GB free, or use the managed lab device at a readiness-approved THNF centre.
Software and practical access
An authorised isolated virtual lab supplied and supervised by the training team; never use production or third-party systems without written permission.
Possible progression
Authorised security-support, SOC, vulnerability-management or digital-forensics trainee; external certifications remain separately awarded.
Progression is not a guarantee of employment or external certification.Sierra Leone context
Authorised scenarios involving local SMEs, schools, NGOs, mobile-money fraud and shared devices, with safeguarding and Sierra Leonean legal and ethical boundaries.
Skills in context
Career directions and next steps
These are realistic directions that the skills can support—not promises of employment, job titles or external certification.
- Cybersecurity-support trainee
- Security-operations trainee
- Vulnerability-management assistant
Possible progression pathways
Cybersecurity