Expected 312-39 Exam Topics, as suggested by Eccouncil :

• Module 1: Learn use cases that are widely used across the SIEM deployment/ Gain knowledge of Incident Response Process
• Module 2: Gain hands-on experience in SIEM use case development process/ Plan, organize, and perform threat monitoring and analysis in the enterprise
• Module 3: Understand the architecture, implementation and fine-tuning of SIEM solutions/ Gain Knowledge of SOC processes, procedures, technologies, and workflows
• Module 4: Gain hands-on experience in the alert triaging process/ Able to prepare briefings and reports of analysis methodology and results
• Module 5: Able to perform Security events and log collection, monitoring, and analysis/ Gain knowledge of administering SIEM solutions
• Module 6: Able to escalate incidents to appropriate teams for additional assistance/ Able to make use of varied, disparate, constantly changing threat information
• Module 7: Gain experience and extensive knowledge of Security Information and Event Management/ Able to monitor emerging threat patterns and perform security threat analysis
• Module 8: Gain understating of SOC and IRT collaboration for better incident response/ Gain knowledge of the Centralized Log Management (CLM) process
• Module 9: Able to develop threat cases (correlation rules), create reports/ Gain a basic understanding and in-depth knowledge of security threats, attacks, vulnerabilities
• Module 10: Gain knowledge of integrating threat intelligence into SIEM/ Able to recognize attacker tools, tactics, and procedures