OT Security Monitoring & SOC
Participants select safe OT data sources, establish normal-communication baselines, and enrich events with asset and process context. The course covers detection engineering, alert priority, triage, playbooks, and useful SOC metrics without relying on disruptive scanning.
Learning objectives
- Choose collection points and passive-monitoring methods
- Build baselines and threat-informed detection use cases
- Design joint SOC/operations triage and playbooks
Who should attend
- SOC analysts and detection engineers
- OT security engineers and managers
- Industrial network and operations teams
Prerequisites
- Familiarity with logs, SIEM, and traffic analysis
- Basic understanding of OT protocols and architecture
Core course modules
- Security Monitoring & Operations