Understand How a SOC Works by Setting Up a Basic Monitoring Environment

Business Scenario

Welcome!

You are a Junior SOC Analyst at CyberSecure Solutions. Your organization wants to monitor its systems for suspicious activity.

Your task is to set up a basic monitoring environment, collect system logs, identify suspicious events, and investigate them as a SOC analyst would.

Pre-Lab Preparation

Topic : SOC Fundamentals

1) Introduction to Security Operations Center (SOC) 

2) Roles and responsibilities of a SOC analyst

3) Security monitoring fundamentals

Task 1: Download the Wazuh OVA File

Open your browser and search for “(https://wazuh.com)” on your preferred search engine.

1

Click the first result, which should direct you to the official Wazuh website

2

Navigate to the Documentation section from the homepage.

3

Now scroll down then you will find the documentation menu click on the “documentation” ,then  locate and select Installation Alternatives.

a

Then in the “installation alternatives” select Virtual machin(VM).

4

Choose the Wazuh Virtual Machine (OVA) option. By default, the documentation may display the latest version (e.g., 4.8). Use the version dropdown in the top-right corner to select Wazuh 4.14.7 

5

In the Packages List table, find the OVA file link for Wazuh 4.7 and click to download it. The file size is approximately 3-4GB, depending on the version. 

6

Launch VMware Workstation 17 Pro on your system.

7

Click File > New Virtual Machine to start the VM creation wizard.

8

Select I will install the operating system later and click Next. Choose Linux as the guest operating system. Click Browse and locate the downloaded Wazuh 4.14.7 OVA file.

9

Click Import to begin importing the OVA file into VMware. This process may take a few minutes, depending on your system’s performance.a

10

Task 2:  Power On the Virtual Machine

Select the Wazuh VM in VMware and click Power on this virtual machine. 

a

The VM will begin loading the Wazuh system. This may take a few minutes as the system initializes. 

b

Once the VM boots, you’ll be prompted with a login screen. Use the default credentials:

1

Username: wazuh-user

Password: wazuh

After logging in, the Wazuh system should be fully operational.

Access the Wazuh Web Interface

2

Check the IP address assigned to the Wazuh VM:

In the VM’s terminal, run the command ip addr or ifconfig to identify the IP address (e.g., 192.168.172.128). Note the IP address for the next step. On your host machine, open a web browser and navigate to https://<VM-IP-ADDRESS> (e.g., https://192.168.172.128).

a

Then will get this interface.

b

Task 3: Understand the SOC Environment

Identify the main components of a basic SOC

1

Steps

a

  1. Open the monitoring/SIEM platform.

  2. Identify the following components:

    • Endpoint

    • Log Source

    • SIEM

    • Alert

    • SOC Analyst

  3. Understand how logs move through the environment.

Task 4: Connect a System to the Monitoring Platform

Collect system logs for monitoring.

1

Steps

a

  1. Start the Windows/Linux test machine.

  2. Install the monitoring agent according to the instructor's instructions.

Task 4: Connect a System to the Monitoring Platform

Collect system logs for monitoring.

1

Steps

a

  1. Start the Windows/Linux test machine.

  2. Install the monitoring agent according to the instructor's instructions.

Task 1: Understanding BRD

Before you start building anything, you need to clearly understand what the client actually wants.So, let’s begin by understanding the BRD (Business Requirement Document) shared by the client.

BRD Full Form is Business Requirement Details.BRD like a plan for building a house. This plan helps the builder understand what to build.In the same way,BRD tells developers what the client wants to build

Click to download BRD : BiteBox_BRD.pdf

Activity

After going through BRD list down the Core Features and  Web Pages in the tabulated Format as shown Below.

Col 1Col 2Col 3
Row 1
Row 2
Row 3

Formula

Profit = Revenue - Cost

Task 2: Create WireFrame

Now that you understand the requirements, don’t jump into coding yet. Before development, we always visualize the layout.

Now lets  create a simple wireframe for the homepage.

A wireframe is like a layout plan of a house. Before building, you decide where rooms, doors, and windows will be placed.Similarly, a wireframe helps you plan where elements like headers, images, and buttons will appear on a webpage—before adding design or colours.

Task 3: Code Editor Installation

Good work on completing the planning phase.

Now we will start development. Before that, make sure your system is ready with the required tools.

In this step we will install the VS code editor that will help to Write code efficiently,Organize files , Run and test your application

Go to the visual studio code official website  

1

Click to download Homepage Wireframe : Homepage Wireframe

Link - https://code.visualstudio.com/download

Choose your operating system(windows / Mac) and download the installation file.

Double click on the download app and Accept the agreement and click next

2

It is a long established fact that a reader will be distracted

b

Sub Steps

a

 Double click on the download app and Accept the agreement and click next 

public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}
public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}

public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}

 

Great job!
You have successfully completed your first lab on BiteBox Project Onboarding.

In this lab, you have: Understood the BRD, Created a wireframe, Set up your development environment, Organised your project structure, Run your first program

You are now ready to move to the next stage of development

Checkpoint

Next-Lab Preparation

   Git Push

git push origin branchName

Topic : Working with a Text and Listin HTML

1) Power of HTML text tags
2) Customizing your style with CSS
3) Listing it right using HTML
4) HTML Link up , attributes of tag, block vs inline elements

Text box Width : 887
Business Scenario, Pre-lab Preparation, Next-lab Preparation, Task, Activity, Checkpoint : 90%.
Steps : 1,2,3 [Sub Steps - a,b,c]
Normal Text, Topic Name : 80%
Subtopic : 70%
Code Box font Size : 16px

Copy of Copy of Copy of Copy of Vertical infinite scroll OG - Template

By Content ITV

Copy of Copy of Copy of Copy of Vertical infinite scroll OG - Template

  • 3

More from Content ITV