During my internship at Smarttech247, I gained both theoretical and practical skills in cybersecurity within the Security Operations Center (SOC).The internship spanned 8 weeks and involved working with SIEM tools and responding to cyber threats. Over the course of the internship, my activities each week included:• Week 1: Introduction to cybersecurity fundamentals, including the role of cybersecurity and type of threats• Week 2: Introduction to network security, covering the OSI model, network access control, firewall functions, wireless security (WEP, WPA1, WPA2, WPA3), system administration methods (reboot, control, immunology) and the function of key network protocols such as FTP, HTTP and SSH.• Week 3: Securing devices, including mobile device security, data encryption, and data loss prevention strategies.• Week 4: First contact with QRadar SIEM, focusing on monitoring offenses, investigating logs, and learning key terms like payload, anomaly, flow, magnitude, false positive or gateway. Familiarization with network protocols such as DHCP and ARP, which play a significant role in the communication process.• Week 5: Advanced QRadar SIEM skills, including detecting ransomware, managing extensions, and conducting advanced searches using AQL.• Week 6: Short introduction to Microsoft Sentinel and Splunk, exploring their functionality and role in security monitoring and incident response.• Week 7: Live QRadar SIEM demo, including practical experience in generating reports and monitoring offenses within the SOC.• Week 8: Final project involving real-time incident investigation and reporting based on offenses generated in a test environment.