Tutorvo
Cybersecurity Intermediate

SOC Analyst & Blue Team: Log Investigation

Reconstruct an intrusion from raw logs using nothing but the shell — on sample data you generate in your own lab.

11 lessons 1.1 h Certificate

  • One-time payment
  • 14-day money-back guarantee
  • Secure checkout with Stripe

About this course

Attacks leave traces, and this course trains you to read them. Working on sample authentication and HTTP logs you create in your own lab, you build a complete investigation using only command-line tools. Early lessons show where Linux records events and how syslog and nginx formats are structured. You then practise filtering with grep, extracting fields with awk, and counting and ranking with sort and uniq to find the one address behaving badly. You study the tell-tale shapes of a brute-force login and a directory-busting scan, pin down what the intruder accessed, and assemble the events into an ordered timeline. The course closes with writing simple detection rules and a concise incident report. Quizzes throughout and a final exam lead to a certificate; all data is synthetic and local.

Curriculum

Course content

11 lessons · 1.1 h · final exam

  1. Unlocked when you buy the course
  2. Where Logs LiveReading6 min
    Unlocked when you buy the course
  3. Hunting with grepReading6 min
    Unlocked when you buy the course
  4. Unlocked when you buy the course
  5. Unlocked when you buy the course
  6. Spotting Web ReconReading6 min
    Unlocked when you buy the course
  7. Finding the BreachReading6 min
    Unlocked when you buy the course
  8. Unlocked when you buy the course
  9. Unlocked when you buy the course
  10. Unlocked when you buy the course
  11. Unlocked when you buy the course
  12. Final exam8 questions, 70% to pass, unlimited retries.

Certificate

Finish with a certificate you can verify

Complete every lesson and pass the final exam to receive a certificate of completion for this course, with a unique credential ID and a public verification page.

  • Names the course, your score and the date of issue
  • A verification link for your CV or LinkedIn profile
  • 8 questions, 70% to pass, unlimited retries.

A Tutorvo certificate confirms that you completed a course. It is not an official or professional qualification.

Illustration. Your certificate shows your own name, course and credential ID.

Before you buy

Questions about this course

Is this a subscription?

No. You pay $9.99 once for this course. There is no subscription and nothing renews automatically. Prices are in US dollars; taxes may be added where required.

What exactly do I get?

All lessons and labs of this course, the final exam and the certificate, including later updates to the course, for as long as Tutorvo offers it. Access is personal and tied to your account.

Can I get a refund?

Yes. If you are not satisfied, email hello@tutorvo.com within 14 days of buying and we refund the course in full via Stripe. The guarantee does not apply once a certificate for the course has been issued to you, or where there are signs of abuse.

When can I start?

Right after payment. Access starts immediately at your request; for consumers in the EU/EEA the statutory right of withdrawal therefore ends once access has begun, while our 14-day money-back guarantee applies regardless.

Do I need Excel or other software?

No. The labs run in a spreadsheet inside your browser on a laptop, tablet or phone. Function names and syntax follow Excel.

Is the certificate an official qualification?

No. It confirms that you completed all lessons of the course and passed its final exam. It is not an official, state-recognised or professional qualification. The name is taken from your profile when the certificate is issued.

Full details are in our Terms · hello@tutorvo.com

$9.99one-time payment
Buy course