BQ205G: IBM QRadar SIEM Advanced Topics
QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses.
Inhalte
This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned.
Ziele
- Learn how to create custom log sources
- Discover how to work with reference data collections and custom rules
- Use X-Force data and Threat Intelligence app
- Use the Use Case Manager app
- Learn how to use UBA and QRadar Advisor
- Discover Tuning
- Explore Custom action scripts
- Discuss Integration with IBM SOAR
Zielgruppe
This course is designed for security administrators and security analysts.
Voraussetzungen
- IT infrastructure
- IT security fundamentals
- Linux
- Microsoft Windows
- TCP/IP networking
- Log files and events
- Network flows
You should also have completed the IBM QRadar SIEM Foundations course.
Preise
Kursgebühr
1.600,00 € exkl. MwSt.
1.904,00 € inkl. MwSt. Kursdauer 2 Tage
Ihr CBT Trainingsteam
Gabriela Bücherl
Geschäftsführung
Vertrieb
Kontakt/Fragen:
beratung@cbt-training.de
Telefon: +49 (0)89-4576918-16
Anfrage für ein Firmenseminar
- Individuelle Zusammenstellung der Themen
- Maßgeschneidert auf Ihre Ziele
- Inhouse oder als Virtual Classroom LIVE Training
Leistungen Präsenz
- Schulung im Trainingscenter
- Verpflegung
- Teilnahmebestätigung / Zertifikat
Leistungen bei VCL Training
- Technischer Support
- Online Zugang
- Teilnahmebestätigung / Zertifikat