PROGRAM MODULE · EN / ES · SEC3
Logs and alerts
Synthetic data, local parser, alert matrix and incident dossier.
MODULE SYLLABUS
Lessons and objectives
Review the sequence before you start. Each link opens the corresponding lesson in the protected student guide; a verified account and active membership are required.
SEC3-1 · 4 h
Log quality
- Validate log quality without destroying original evidence.
SEC3-2 · 4 h
Time and correlation
- Correlate events with explicit, preserved clock correction.
SEC3-3 · 4 h
Local detection rules
- Define a local alert rule and measure its limitations.
SEC3-4 · 4 h
Synthetic-log triage
- Perform complete triage of twelve synthetic events while preserving evidence.
PREPARATION
Before you begin
Functional reading, basic arithmetic and file management. Complete an entry diagnostic.
This module follows Access and segmentation. Review the earlier material if you need to strengthen the foundations.
Read the explanations and examples before practicing. Keep your results and limitations in your own file: these pages do not automatically record attendance, progress or grades.
STUDENT MATERIALS
Continue to guided learning
This syllabus is public. Full explanations, exercises, downloads and simulators retain Academy access controls: an active verified account, active membership and the appropriate permissions. Cohort enrollment is not open.