Background: 

Analyst Fundamentals is a 3-part e-Learning series designed for Security Analysts and those who work in the LogRhythm Web Console. It is part of the LogRhythm Security Analyst Learning Pathway: completion of these 3 courses + a passing grade on the LogRhythm Security Analyst Exam leads to LogRhythm Security Analyst certification. The course is featured on the LogRhythm University Website. 

Analyst Fundamentals started out as a 3-day long, 8 hours a day Instructor Led Class with hundreds of pages of documentation. The class was not receiving rave reviews so when my teammates and I had the opportunity to convert this ILT into a Self-Paced On-Demand course, we deconstructed it and rebuilt it for a better user experience! 

Key features:

• Fully immersive experience with mentors and guided practice of the LogRhythm SIEM platform.

• True to-life use cases and storytelling to mimic real-world experiences in a controlled environment.

• Instant feedback in the simulated lab environment.

• Designed with Adult Learning Theory in mind:

  • Hands-on, problem-centered, activation of prior knowledge, self-directed, assessments, review.

• Engaging e-Learning games to practice skills

• Company colors and fonts.

First Steps:

• Reviewed and assembled all course material.

• Reviewed learner profiles and past course analytics.

• Documented the course objectives.

• Met with SME's to develop a true to life stories to use in the course. 

• Developed a Storyboard and modified it according to SME and stakeholder feedback.

• Had SME's develop sandbox lab environments that incorporated the use-cases used in the stories.

• Developed Project Plan + Jira Tasks with time estimations with 2-week Sprints.

Accessibility: 

• Large font size, color coding, icons, high contrast color combinations.

• Video and audio elements have closed captions and transcripts.

• Clear and concise layout and organization, clear instructions.

• Multiple ways of presenting content.

Games:

• All games include feedback on incorrect answers providing an opportunity to learn

• Featured in beginning of course to review past course material and prime for what's to come

• Featured at end of the course to review material and prep for the Certification Exam

Simulated Lab Environment:

After running into multiple issues with our lab vendor, we decided on using a "simulated" lab experience instead. This type of experience can produce a more guided exploration and practice of the SIEM environment, and provide instant feedback, hints, hot and cold spots, as well as extra challenge questions for the user.