CYBERCOR-MD-2026

Building a Security Operations Center (SOC) with free tools

• Day 1: Using Elasticstack-based SIEM in a SOC
• Day 2: Using Suricata IDS in a SOC
• Day 3: Building a SOC with Wazuh
• Day 4: Vulnerability detection and management in a SOC
• Day 5: Incident handling in a SOC

Hardware requirements

It is assumed that each training participant attends the course with a personal laptop which meets the following requirements:

• x86-64 CPU architecture (training VM images have been created for this architecture)
• At least 8 logical CPUs
• At least 16GB of memory
• Virtualbox version 7 installed on the laptop (Virtualbox VM images are used for training)
• Host-only virtual network (e.g., 192.168.56.0/24) configured in Virtualbox

Training materials

• Day 1 and Day 2
• Day 3 and Day 4
• Day 5