How to Build a SOC Home Lab (Elastic SIEM) | Practical Demo with Pratyush

Value of the Information & Strength of the Argument

The video provides high practical value for beginners and aspiring SOC analysts. It offers a step-by-step guide to building a SOC home lab, which is a hands-on way to learn cybersecurity skills. The argumentation is solid, as Pratyush demonstrates each step live, showing real logs and alerts. The discussion on SOC architecture and career paths is informative and grounded in real-world experience. The emphasis on practical skills and home labs is well-supported by the demo, making the case for hands-on learning compelling.

Scientific Rigor, Source Quality, Title Accuracy

The video is scientifically rigorous in its practical approach, but it lacks formal citations. The sources mentioned are open-source tools like Elastic Stack, Sysmon, WinLogBeat, and Atomic Red Team, which are well-known and reputable. The title accurately reflects the content, and the video stays on topic throughout. The demonstration is clear and reproducible, which adds to its credibility. However, the video does not provide references to academic papers or official documentation, which could enhance its scientific rigor.

The title accurately reflects the content: a practical demo of building a SOC home lab using Elastic SIEM.

8/10

The video provides a practical, step-by-step tutorial on building a SOC home lab using Elastic SIEM, Sysmon, WinLogBeat, and Atomic Red Team. The instructions are clear and based on real-world experience, with a live demo. The content is accurate and aligns with industry practices, though it lacks formal citations and some advanced topics are simplified.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction to SOC and the importance of practical skills.
• 05:00Overview of SOC architecture and the ELK stack.
• 10:00Installation and configuration of Elasticsearch and Kibana.
• 15:00Setting up Windows VM with Sysmon and WinLogBeat.
• 20:00Configuring WinLogBeat to ship logs to Elasticsearch.
• 25:00Introduction to Atomic Red Team and MITRE ATT&CK.
• 30:00Running Atomic Red Team tests and generating logs.
• 35:00Creating detection rules in Kibana and generating alerts.
• 40:00Investigating alerts and understanding the SOC workflow.
• 45:00Discussion on SOC career paths and skills needed.

• Excalidraw diagram of SOC architecture — Visual diagram used to explain SOC architecture.
• Telegram group for study resources — Community for sharing study materials and discussions.
• LinkedIn profile of Pratyush Joshi — Guest's professional profile.
• SOC Playlist — Related videos on SOC topics.
• ISO 27001 Video — Related video on ISO 27001.
• ISO 27001 Implementation Guide — Guide for ISO 27001 implementation.
• GRC Practical Series — Playlist on GRC practical topics.
• GRC Interview — Playlist on GRC interview questions.
• Internal Audit — Playlist on internal audit topics.

• Elastic Stack Documentation — Official documentation for Elasticsearch, Kibana, and Beats.
• Sysmon Documentation — Microsoft's official Sysmon documentation.
• Atomic Red Team — GitHub repository for Atomic Red Team.