SOC Analyst Class-11 | Understanding Data Flow System | Complete Guide

SOC Analyst Class-11 | Understanding Data Flow System | Complete Guide

by SikhoLive Cyber Security

Formal & Physical Sciences Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 SikhoLive Cyber Security 👥 58K 📅 April 26, 2026 ⏱ 20 min 👁 243 📄 tutorial 🧭 2026-08-18
Available in: English (current) Français

Keywords

OSI modelTCP/IP modeldata flowsession hijackingWireshark

Summary

This video is part of a SOC analyst training series, focusing on understanding data flow systems using the OSI and TCP/IP models. The instructor explains the seven layers of the OSI model (Application, Presentation, Session, Transport, Network, Data Link, Physical) and the four layers of the TCP/IP model (Application, Transport, Internet, Network Access), highlighting their functions and differences. He emphasizes the importance of these models for tracking data from source to destination, which is crucial for threat analysis and incident investigation. The video includes a practical demonstration using Wireshark to capture network traffic, showing how session IDs can be intercepted and used for session hijacking on an unencrypted HTTP website. The instructor also provides memory aids for remembering the layers and discusses the role of protocols like HTTP, HTTPS, DNS, and TCP/UDP. The session concludes with a preview of the next topic: IP addresses. Overall, the video serves as a beginner-friendly tutorial for aspiring SOC analysts, combining theoretical explanations with a real-world security demonstration.

164 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides a solid foundational explanation of the OSI and TCP/IP models, which are essential for SOC analysts. The instructor uses clear analogies and practical examples to illustrate how data flows through the layers. The argumentation is straightforward and logical, building from basic definitions to a practical demonstration. The session hijacking example effectively shows the real-world security implications of unencrypted communication, reinforcing the importance of understanding these models. However, the depth of technical detail is limited, and some explanations are oversimplified. The practical part is valuable but could be more rigorous in explaining the captured packets and the exact mechanisms of session hijacking.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite any external sources or references, relying solely on the instructor’s explanations. The practical demonstration is based on the instructor’s own setup, which is not verifiable. The title accurately reflects the content, which is a tutorial on data flow systems. The video is part of a series, and the instructor mentions previous sessions, but no specific references are provided. The lack of citations reduces the scientific rigor, but the content is generally accurate and aligns with standard networking concepts. The practical demonstration with Wireshark adds credibility, though it is not thoroughly analyzed.

215 words

Title / Content Match

The title accurately reflects the content, which focuses on data flow systems and the OSI/TCP-IP models.

Quality & Reliability

6/10

The video provides a clear and structured explanation of the OSI and TCP/IP models, with a practical demonstration using Wireshark and a session hijacking example. However, it lacks citations to authoritative sources and contains some inaccuracies (e.g., conflating OSI and TCP/IP layers, minor errors in protocol descriptions). The practical part is valuable but not deeply rigorous.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

Dissenting Sources

  • None — No discordant sources found.

Contribution & Novelties

The video provides a beginner-friendly introduction to OSI and TCP/IP models with a practical demonstration of session hijacking, which is a valuable addition for SOC analyst training. It bridges theory and practice by showing how data flow understanding is crucial for security monitoring.

Pour aller plus loin :

93 words

Radar Profile

The radar profile shows moderate scores across all dimensions, with slightly higher scores in information quantity and quality, but lower in technical depth and reliability. This indicates a balanced but not deeply rigorous tutorial, suitable for beginners but lacking advanced insights.

Reliability 5/10