Achieved one of my milestone - received the official confirmation email from ISACA today. Even though I completed the certification exam a year ago, my overall experience covering IT Security/Audit role to match the ISACA requirement criteria for submitting application for CISA certification just accomplished.
My recent certification which I attained gives me a great confidence in performing more in my security career. The overall experience taking the course and exam gave a real-time on-the-job client facing feel.
This course covers the below curriculum with a practical challenge question at the end of each topic. A lab environment is configured to carry on this scenario. # Security Operations Fundamentals # Phishing Analysis # Network Security # Endpoint Security # Security Information and Event Management (SIEM) # Threat Intelligence # Digital Forensics # Incident Response
>> Practical SOC Analyst Associate (PSAA) Exam
The certification is an associate-level security operations and incident response exam experience. The exam will assess a student’s ability to use analysis tools, interpret artifacts, and apply investigation methodologies to evaluate security incidents and retrace attacks. Students will have two (2) full days to complete the assessment and an additional two (2) days to write a professional report.
I ended up writing a 40 pages report for this exam. ha ah!!
My recent curious topic for learning is Microsoft Office365, specifically in Defender XDR/Endpoint and Sentinel which is a standard setup in many enterprises in-house SOC.
This is quite interesting subject to learn, which involves the enterprise platform for managing the security posture using endpoint solution through Microsoft Defender for Endpoint, Defender XDR (for Cloud) and integrating SIEM solution through Sentinel (+Azure Logic Apps for SOAR solution).
The Microsoft Security services defending across attack chains. It follows the MITR ATT&CK Framework.
Here are some of the useful reading resources to refer.
this new term lately got into me for various reasons. Firstly, I never know there is such career path exist in Cybersecurity apart from in-depth analyst roles branched as RED/BLUE in Security Operations.
Me being attached to Cybersecurity field for a while now, got introduced to ISACA organization and all their industry recognized certifications. This is when, I read related articles about CISA and began preparation for the exam. It was quite a calculated busy journey until I passed the exam. So, I thought to register my study reference links here for any future use.