Training programs
Three paths. Same desk. Start with the SOC Academy, then hunt and write detections when you're ready.
Core path
View pathCyberBlueSOC Academy
The Complete Blue Team & SOC Training Program
New and working SOC analysts
From Zero to Battle-Ready SOC Analyst.
100+ hours18 modules103 labs
Advanced
View pathCyberBlue Threat Hunting
From Alert Responder to Threat Hunter
Analysts who already triage alerts
Go beyond alerts. Learn to hunt for threats that detections miss — using fresh attack scenarios, constrained-data exercises, and open-ended investigations across SIEM, network, and endpoint tools.
60-75 hours6 modules22 labs
Build detections
View pathCyberBlue Detection Engineering
From Log Line to Versioned Rule
Analysts moving into detection-as-code
From log line to versioned rule — build, test, deploy, and measure detections across SIEM, network, and endpoint.
60-80 hours8 modules16 labs