LEVEL 8 OF 18
Defensive Security / Blue Team
Detect and respond to attacks.
Explore SOC analysis, SIEM, log collection, alert investigation, threat detection and blue-team response in MentorPulse cybersecurity Level 8.
Recommended preparation: Level 7: Web Application Security. This public overview does not expose private learner records or require a login.
Cybersecurity skills and career relevance
Build the reasoning and documentation habits used in SOC alert triage and defensive investigations.
The 18-level roadmap describes the full learning path. Published lessons, labs and projects are available in the app; remaining curriculum content is still in development. Access varies by plan.
Curriculum topics
- Security monitoring
- Log collection
- SIEM
- Network monitoring
- Endpoint monitoring
- Threat detection
- Alert investigation
- Incident response
- Malware indicators
- IOC analysis
- Threat intelligence
- Digital forensics fundamentals
- Detection engineering
- Security automation
Level 8 module outline
- 1.Blue-team fundamentals
- 2.Security monitoring
- 3.SIEM
- 4.Log analysis
- 5.Detection engineering
- 6.Threat intelligence
- 7.Endpoint security
- 8.Network defense
- 9.Alert investigation
- 10.SOC operations
This is the planned module outline, not a claim that every lesson position has been published.
Practice and portfolio directions
- Build a small SOC lab and investigate simulated attacks.
Project directions come from the roadmap. Availability and requirements for individual exercises are shown in the signed-in learning workspace.
Referenced study tools: Splunk, Elastic, Wazuh, Wireshark, Sysmon. These references do not imply affiliation or certification.
Related learning screenshots
Historical interface examples; publication counts and learner progress may differ from the current app.
Cybersecurity roadmap: professional specializations
Professional study areas connect web and enterprise security with investigation, cloud and engineering.
PowerShell security investigation workstation
A simulated workstation encourages source correlation before deciding whether unusual PowerShell activity is authorized.
Cybersecurity education and career development, not a certification, accreditation or employment guarantee. External tools and learning resources are referenced for study, not as partnerships. Practice only in isolated environments or with explicit authorization.