fbpx

IBM QRadar SIEM Foundations

Tanfolyam kódja:
MFIBMQRAD1
Tanfolyam hossza:
24 tanóra, 3 nap, 9.00-16.30
Ára:
307 500 Ft + Áfa
Rövid ismertetés:

After completing this course, you should be able to perform the following tasks:
Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy violations
Search, filter, group, and analyze security data
Investigate events and flows
Investigate asset profiles
Describe the purpose of the network hierarchy
Determine how rules test incoming data and create offenses
Use index and aggregated data management
Navigate and customize dashboards and dashboard items
Create customized reports
Use filters
Use AQL for advanced searches
Analyze a real world scenario

Előfeltételek:

Before taking this course, make sure that you have the following skills:
IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
Syslog

Kiknek ajánljuk?

This course is designed for security analysts, security technical architects, offense managers, network administrators, and system administrators using QRadar SIEM.

Képzés nyelve:
Magyar, igény esetén angol
Részletes leírás:

IBM QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, asset profiles, and vulnerabilities. QRadar SIEM classifies suspected attacks and policy violations as offenses.
In this 3-day instructor-led course, you learn how to perform the following tasks:
Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy breaches
Search, filter, group, and analyze security data
Investigate the vulnerabilities and services of assets
Use network hierarchies
Locate custom rules and inspect actions and responses of rules
Analyze offenses created by QRadar SIEM
Use index management
Navigate and customize the QRadar SIEM dashboard
Use QRadar SIEM to create customized reports
Use charts and filters
Use AQL for advanced searches
Analyze a real world scenario
Extensive lab exercises are provided to allow students an insight into the routine work of an IT Security Analyst operating the IBM QRadar SIEM platform. The exercises cover the following topics:
Using the QRadar SIEM user interface
Investigating an Offense triggered by events
Investigating the events of an offense
Investigating an offense that is triggered by flows
Using rules
Using the Network Hierarchy
Index and Aggregated Data Management
Using the QRadar SIEM dashboard
Creating QRadar SIEM reports
Using AQL for advanced searches
Analyze a real-world large-scale attack
The lab environment for this course uses the IBM QRadar SIEM 7.3 platform.

Kapcsolódó vizsgák:

C1000-018
IBM QRadar SIEM V7.3.2 Fundamental Analysis
C1000-026
IBM Security QRadar SIEM V7.3.2 Fundamental Administration
BQ103 alone will not adequately help you prepare for the tests. BQ103 can, however, be used as a supplement to the first self-study course.

Vissza


Hasonló tanfolyamok listája:

A tanfolyamon a hallgatók elsajátíthatják a számítógépes hálózatok tervezését és üzemeltetését biztonsági szempontból.

Learn basic concepts and develop skills  necessary to administer IT security fundamental tasks.

Validate and enhance your skills and optimally manage Check Point advanced security management systems.

The Designing HPE Hybrid IT Rev. 19.21 course is design to teach students the intermediate level skills to plan, design, recommend, and demonstrate HPE Hybrid IT solutions and deliver a proof-of-concept for a given solution to a customer. The course is five days in duration and includes lectures and activities in the ratio of approximately 25/75 (lecture/activities). Activities include sizing exercises using tools available from sources such as the HPE Partner Portal and exercises using HPE emulators.

This course teaches students how to identify, recommend, and explain HPE Nimble storage solutions. It covers the HPE Nimble hardware and software, initial configuration, HPE Nimble Storage Volumes, snapshots, and replication.
The course uses participant centered learning and hands-on labs.

This course teaches students about HPE server architectures and associated technologies as well as their functions, features, and benefits. Additionally, students will learn about planning and designing HPE server solutions and positioning HPE server solutions to customers.
This course uses participant centered learning and hands-on emulators. Emulators use software to replicate HPE Server technologies and allow learners to engage in lab activities using web based resources.

The Engineering Cisco Meraki Solutions Part 1 (ECMS1) v1.1 is a one-day course that equips students with the knowledge and skills to confidently operate Cisco Meraki deployments. This instructor-led course includes live demos and guided lab practice. Students will learn how to implement core configurations for a full stack solution in the Meraki Dashboard and how to leverage essential Meraki Dashboard tools for troubleshooting.

Create custom log sources to utilize events from uncommon sources
Create, maintain, and use reference data collections
Develop and manage custom rules to detect unusual activity in your network
Develop and manage custom action scripts to for automated rule reponse
Develop and manage anomoly detection rules to detect when unusual network traffic patterns occur

The Implementing and Administering Cisco Solutions (CCNA) v1.0 course gives you a broad range of fundamental knowledge for all IT careers. Through a combination of lecture and hands-on labs, you will learn how to install, operate, configure, and verify basic IPv4 and IPv6 networks. The course covers configuring network components such as switches, routers, and wireless LAN controllers; managing network devices; and identifying basic security threats. The course also gives you a foundation in network programmability, automation, and software-defined networking.

This course teaches you how to implement and operate enterpriselevel Aruba campus switching solutions. Hand-on labs give you experience with ArubaOS-Switches, including securing access, redundancy technologies such as Multiple Spanning Tree Protocol (MSTP), link aggregation techniques including Link Aggregation Protocol (LACP) and switch virtualization with HPE’s Virtual Switching Framework (VSF). You will also learn to configure dynamic routing with Open Shortest Path First (OSPF) and Border Gateway Protocol (BGP), network optimization via Quality of Service (QoS), IP multicast routing leveraging Protocol Independent Multicast (PIM), and protecting the network using Access Control Lists (ACLs). This course is approximately 30% lecture and 70% hands on lab exercises.

This course teaches the HPE OneView 5.X infrastructure management solution and is the supporting training course for the exam requirement in the certification HPE Product Certified - OneView [2020].
Topics covered in this course include:
• HPE OneView architectural model
• Product features and functions
• How to configure
• How to recommend and demonstrate

Tanfolyam naptár
H K Sze Cs P Szo V
26 27 28 29 30 1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
31 1 2 3 4 5 6
Tanfolyam időpontok

Első oktatási nap:

2021-09-28  (Hétköznap napközbeni (09.00 - 16.30))

Jelentkezési határidő:

2021-09-21

Képzés nyelve::

Magyar

Első oktatási nap:

2021-11-16  (Hétköznap napközbeni (09.00 - 16.30))

Jelentkezési határidő:

2021-11-09

Képzés nyelve::

Magyar

Ha egyik időpont sem felel meg neked, de érdekel a tanfolyam, kérünk, hogy add le jelentkezésedet időpont nélkül! Új időpont felvételekor értesíteni fogunk.


Amennyiben munkatársaiddal zárt csoportos képzésen veszel részt és kaptál a tanfolyam időpont kódot, itt tudod leadni jelentkezésedet


Jelentkezésedet leadhatod a kitöltött jelentkezési lap visszaküldésével is