CS 173 — Introduction to Security Logs and Threat Detection

Students in this course are provided a technical introduction to the identification, collection, and analysis of digital logs within a Security Operations Center (SOC) framework. Students will develop fundamental skills in analyzing raw data from diverse sources, including Windows Event Logs, Linux Syslog, web servers, and network telemetry.