> For the complete documentation index, see [llms.txt](https://cybrhawksoc.gitbook.io/cybrhawk-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide.md).

# SOC Analyst Guide

- [Customer Operational Guide](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/customer-operational-guide.md)
- [Quickstart](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/quickstart.md)
- [Practice Alert Triage](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/quickstart/practice-alert-triage.md)
- [Office 365 Impossible Travel](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/quickstart/practice-alert-triage/office-365-impossible-travel.md)
- [Analyst Cheat Sheet](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/analyst-cheat-sheet.md)
- [Platform Navigation](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/platform-navigation.md)
- [Security Detections](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/security-detections.md)
- [Overview](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/security-detections/overview.md)
- [Triaging Alerts](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/security-detections/triaging-alerts.md)
- [Escalations](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/security-detections/escalations.md)
- [Whitelisting](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/security-detections/whitelisting.md)
- [Everyday Tasks](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks.md)
- [Review Tenant Inventory](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/tenant-inventory.md)
- [Analyze Entra ID Logons](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/entra-id-logons.md)
- [Monitor Privileged Users](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/windows-privileged-users.md)
- [Review Vulnerabilities](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/vulnerabilities.md)
- [Check Dark Web Leaks](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/dark-web-leaks.md)
- [Analyze Network Intrusions](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/investigate-network-intrusions.md)
- [MS365 User Isolation](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/everyday-tasks/ms365-user-isolation.md)
- [Search Queries](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/search-queries.md)
- [Threat Hunting](https://cybrhawksoc.gitbook.io/cybrhawk-docs/soc-analyst-guide/threat-hunting.md)