Cybersecurity Blue Team / SOC Analyst Beginner: orientation and topology

Scenario

You are stepping into the role of SOC analyst and detection engineer. Your job is to map the Cybersecurity Blue Team / SOC Analyst environment before making changes.

Workspace

Topology: SOC range practice with endpoint telemetry, controlled events, and analyst reporting.

Primary tools: Wazuh, Linux, Windows

Tasks

1. Launch the course pod and wait for the VM status to become running.
2. Open every available console and record host names, IP addresses, and access methods.
3. Identify the service boundary, management path, and rollback point.
4. Create a short implementation note that explains what this lab proves.

Validation Focus

• siem-receiving-logs
• firewall-rules-active
• vm-reachable

Reflection

Explain how soc, blue-team, detection appears in the workspace and what evidence an instructor should expect from a Beginner learner.