- Welcome to Lesson 6, Fundamentals of Security Monitoring.
This lesson starts by describing endpoint-based attacks
and the concepts of data normalization.
You will learn how to deconstruct universal data formats,
the concept of the 5-tuple correlation,
and how to perform intrusion analysis using DNS records.
You will learn how to perform web log analysis,
deterministic and probabilistic analysis,
as well as security monitoring best practices.
This lesson provides an overview
of different security monitoring tools
and different operational challenges
in the Security Operations Center, or the SOC.