ADGM Academy

Discover who we are, what drives our mission, and how we empower talent through industry partnerships, innovative learning, and programmes that strengthen the region’s financial and business landscape.

Read more
Featured Highlights ADGM Academy Annual Report Highlights 2025 as a Year of Measurable Impact in Advancing National Talent and Market Capability Mawaheb Talent Hub, ADGM Academy, Khalifa Fund for Enterprise Development, and Sindan Celebrate the Graduation of the First Cohort of the 3D Printing Entrepreneurs Programme in Al Ain
ADGM Academy Schools

Explore ADGM Academy’s schools, where industry aligned programmes, expert led learning, and practical skill development come together to prepare professionals for success in today’s fast evolving business landscape.

Explore all ADGM Academy Schools
Featured Schools Developing expertise for the evolving world of sustainable finance Preparing professionals to lead in evolving treasury and risk functions
Explore our Programmes

Explore a wide range of industry aligned programmes designed to build future ready skills, support professional growth, and empower individuals and organizations to thrive in today’s rapidly evolving financial and business landscape.

Explore our Programmes
Featured Highlights Delivering structured assessments that strengthen capability and guide professional growth Modern facilities equipped to host impactful meetings and events
Explore our Tech Centre

Abu Dhabi’s multi-sector innovation hub – a first-of-its-kind ecosystem that fuses education, research, regulation, and investment under one roof. We bring together policymakers, regulators, industry leaders, researchers, and entrepreneurs to shape the technologies and industries of tomorrow.

Explore more
Latest Publications Quantum Computing in Digital Capital Markets Blueprints for the Future: RealAssetX Abu Dhabi Innovation Showcase
Explore our Knowledge Library

Our research focuses on five strategic themes that are redefining the future of financial services and the broader economy. Through authoritative papers, insights, and reports, we turn complex challenges into practical knowledge that supports industry leaders, regulators, and entrepreneurs.

Explore more
Upcoming events Rethinking Family Portfolios: The Rise of Private Markets AI in Financial Supervision: How Regulators Are Transforming Oversight and Risk Assessment Webinar Digital Assets, AI & the Future of Family Offices
Cyber Arena

Security Operations Centre (SOC) Analyst Programme

Tech Centre Cyber Arena Security Operations Centre (SOC) Analyst Programme

Programme Overview

This programme is designed for Cyber security professionals who wish to enter or advance their skills in Security Operations Centre (SOC).  

The programme covers common attack vectors, use of security tools and technologies, SIEM, incident response processes, coordination, and development of SOC. 

Participants gain proficiency in centralised log management, incident triaging, recognition and investigation of IOCs and cyber kill chain.  

They also gain the ability to recognise emerging threat patterns, develop corelation rules, and create effective reports.  

Participants learn how to use AI enabled tools and platforms to enhance SIEM capabilities, behaviour analytics, alert prioritisation and automate threat detection and threat hunting using solutions like Splunk AI, Elastic AI, Copilot, ChatGPT, and PowerShell AI. 

This programme will equip participants to run a robust SOC with enhanced incident detection and response capabilities. 

Programme Benefits Programme Modules ADGM Academy ADGM Academy Certificate of Completion Three Days
Programme Benefits
Comprehensive coverage of several topics with coverage up to L3 SOC Analyst. Strong focus on end-to-end workflow, procedures, technologies, and day to day operations conducted by a SOC Analyst (L1, L2, L3) in the SOC.
Inclusion of topics to equip participants to use AI / ML capabilities for SOC.
Hands-on training- 50+ hands-on labs and 120+ tools. Sixty-five elaborate use cases of SIEM deployment. Course work mapped to NICE 2.0 framework.
Participants get exam voucher for EC Council’s CSA certification. Participants get one year access to e-books and six months access to online cloud labs. 
Who is the Programme for?

This programme is for SOC Analyst (L1, L2, L3), aspiring SOC analyst, incident responders and all cyber security / IT professionals who wish to have a comprehensive understanding of SOC domain.

Registration Form

Register Now
* Please note: This programme is available only to corporate groups. Individual signups are not eligible.
Learning Modules

Module 1: Security Operations and Management 

This module helps participants understand how a SOC enhances an organisation’s security management to maintain a strong security posture. SOC Operations, SOC workflow, SOC Maturity models, SOC KPIs 

Module 2: Understanding Cyber threats, IoCs and attack methodology

Reconnaissance attacks, Man in the Middle attacks, Password attack techniques, APT life cycle, SQL injection attacks, XSS attacks, CSRF attacks, social engineering attacks, IoCs, attacker hacking methodology, MITRE D3FEND Framework, Diamond model of intrusion analysis. 

  • Hands-on Labs: Perform SQL injection attack, XSS attack, network scanning attack, DOS attack, brute force attack to understand their TTPs and IoCs. 
  • Hands-on Labs: Detect and analyse IoCs using wireshark. 

Module 3: Log Management 

Learn log management in SIEM, including how logs are generated, stored, centrally collected, normalised, and correlated across systems. AI powered script for log storage. 

  • Hands-on Labs: Configure, monitor, and analyse various logs. 
  • Hands-on Labs: Collect logs from different devices into a centralised location using Splunk. 

Module 4: Incident Detection and Triage 

Learn SIEM fundamentals, including its capabilities, deployment strategies, use case development, and how it helps SOC analyst detect anomalies, triage alerts, and report incidents. AI- enabled SIEM, SIEM rules generation with AI, Dashboards in SOC. 

  • Hands-on Labs: Develop Splunk use cases to detect and generate alerts. Enhance alert triage using SIGMA rules for Splunk queries. Create dashboards in Splunk. 
  • Hands-on Labs: Create ELK use cases. Create dashboards in ELK.  
  • Hands-on Labs: Detect brute force attack patterns using correlation rules in ManageEngine Log 360. 

Module 5: Proactive Threat Detection 

Learn the importance of Threat intelligence and Threat hunting for SOC Analyst and their integration with SIEM. Threat intelligence lifecycle, Threat intelligence sources, Enhanced threat detection with AI, Threat hunting frameworks, Threat hunting with PowerShell script, PowerShell AI module, Threat hunting with AI, Threat hunting with YARA,  

  • Hands-on Labs: Integrate IoCs into the ELK stack. 
  • Hands-on Labs: Integrate OTX threat data into OSSIM. 
  • Hands-on Labs: Detect incidents in Windows server using YARA. 
  • Hands-on Labs: Conduct Threat hunting using Windows PowerShell scripts, Hunt manager in Velociraptor, Log360 UEBA, and Sophos Central.

Module 6: Incident Response 

Lean steps in incident response and how Incident Response team collaborates with SOC to manage and respond to escalated incidents. Ticketing system, incident triage, SOC playbook, EDR, XDR, SOAR, SOAR playbook. 

  • Hands-on Labs: Generate tickets for incidents. 
  • Hands-on Labs: Contain data loss incidents. 
  • Hands-on Labs: Eradicate SQL injections and XSS incidents. 
  • Hands-on Labs: Perform recovery from data loss incidents. 
  • Hands-on Labs: Create incident reports using OSSIM. 
  • Hands-on Labs: Perform automated threat detection and response using Wazuh. 
  • Hands-on Labs: Detect threats using Sophos Central XDR 
  • Hands-on Labs: Integrate Sophos Central XDR with Splunk 

Module 7: Forensic investigation and Malware Analysis 

Forensic investigation methodology, Forensic investigation of networks, applications, email, insider incidents. Malware analysis- static and dynamic 

  • Hands-on Labs: Forensic investigation of SQL injection attacks 
  • Hands-on Labs: Forensic investigation using Velociraptor. 
  • Hands-on Labs: Analyse RAM using Redline. 
  • Hands-on Labs: Static analysis of a file using Pestudio. 
  • Hands-on Labs: Examine a file using Virustotal. 
  • Hands-on Labs: Dynamic malware analysis in Windows using Process Hacker 

Module 8: SOC for Cloud Environment 

Learn SOC processes in cloud environments, covering monitoring, incident detection, automated response, and security in AWS, Azure and GCP using cloud native tools. Azure SOC architecture, Microsoft Sentinel, AWS SOC architecture, AWS security hub, Centralised logging with OpenSearch, GCP SOC, Chronicle. 

  • Hands-on Labs: Implement Microsoft Sentinel in Azure.

Programmes You May Be Interested In

Cyber Security Awareness Programme

This programme equips participants with the essential knowledge and practical awareness needed to recognise, prevent, and respond to common cyber threats...

AI for Cybersecurity and Bug Bounty Hunting Programme

This programme explores how artificial intelligence can strengthen cybersecurity operations and support more efficient bug bounty hunting...

Digital and Network Forensics Advanced Programme

Digital forensics has become a critical capability as cyber threats grow in scale, sophistication, and financial impact globally...

Digital and Network Forensics Essentials Programme

This programme introduces participants to the core principles of digital forensics and the computer forensics investigation process.

Detecting and Mitigating AWS Threats Programme

This programme consists of two parts. Part 1 focuses on identifying vulnerabilities in AWS through penetration testing.

Incident Response and Principal Tactics Programme

This programme provides comprehensive training on the incident handling and response lifecycle, combined with hands-on labs that teach the tactical...

OT Cyber Security Awareness Programme

This programme provides a solid foundation in Operational Technology (OT) cybersecurity. Participants will explore the key differences between OT and IT security...

Cyber Threat Intelligence and Threat Hunting Programme

This programme is designed for professionals involved in collecting, analysing, and disseminating cyber threat intelligence...

ICS / SCADA Cybersecurity - Defensive and Offensive Strategies Programme

Industrial Control Systems (ICS) and SCADA environments are increasingly targeted by sophisticated cyber threats that can disrupt critical...

Comprehensive Cyber Training from Beginner to Pro Programme

This comprehensive cybersecurity programme is built around five core pillars designed to take participants from foundational knowledge to practical...

Advanced OT Cybersecurity Programme

This programme is tailored for IT and OT Cyber Security professionals seeking to deepen their understanding beyond the fundamentals of OT Cyber Security...

Cyber Crisis Management Programme

A simulated cybersecurity incident exercise programme designed to train teams on real-life response scenarios in a controlled environment...

Cybersecurity Leadership Executive Management Programme

This executive programme is designed for Board Members and C-Suite executives, offering an overview of core cybersecurity principles and best...

Ethical Hacking Powered by AI Programme

This programme combines ethical hacking with artificial intelligence capabilities, equipping participants to strengthen organisational cyber resilience...

Network Defender Programme

This programme equips participants with critical skills to defend their networks and operating environments across local networks, endpoints, cloud infrastructure...

Cybersecurity Foundation Programme

This programme is an entry‑level course designed to directly address the industry’s growing demand for Cybersecurity professionals equipped with strong...

About

Who we are Why ADGM Academy The Alumni Network Leadership Faculty Academy Centres News

Schools

Overview Artificial Intelligence Banking & Finance Digital Literacy Entrepreneurship Law Management National Development Programmes Sustainable Finance Taxation Treasury Wealth & Asset Management

Offering

Qualification Examination Certification & Coaching Digital Learning Platform Venue Booking

Research & Tech

Research Centre Tech Centre Publications Cyber Arena Freedom Investment Lab FutureTech 4.0 EnerTech RealAssetX Abu Dhabi Research Themes Advisory Board

Resources

Events Blogs & News Contact Us Location
© 2026 ADGM. All rights reserved. Terms and Conditions

We use cookies and similar technologies that are necessary to operate the website. Additional cookies are used to perform analysis of website usage. By continuing to use our website, you consent to our use of cookies. For more information, please read our Cookies Policy.

Reject Accept