Your first week on the job: phishing, credential theft, and social engineering basics. Learn to investigate the initial access vectors every SOC analyst sees on day one.
Phishing, credential theft, and social engineering are the front door of most intrusions worldwide. Below: where reported phishing and BEC pressure concentrates in 2025-26, and the lure families every first-week analyst triages. Tiers are directional; hover a marker for the regional picture.
Threat concentration
Phishing, credential theft, and social engineering are the front door of most intrusions worldwide. Below: where reported phishing and BEC pressure concentrates in 2025-26, and the lure families every first-week analyst triages. Tiers are directional; hover a marker for the regional picture.
Identity is the new perimeter. Track a stolen credential through MFA bypass, session hijack, and cloud token abuse.
The attacker is inside. Find the beacon, the web shell, and the foothold on hosts and exposed edge devices.
How a foothold becomes a crisis. Follow privilege escalation and lateral movement toward domain control and ransomware.
40 techniques across 13 tactics.
A verifiable credential awarded for completing the track.
Phishing and stolen credentials open the door to most breaches every year. These are the alerts you triage on day one of any SOC, so getting fast and accurate here is the base every other skill builds on.
40 techniques across 13 tactics.
