ArcSight ESM Administrator and Analyst (ESM200)

This course is intended for:

Monitor, remediate, and report on security incidents using ArcSight ESM facilities
Use standard content to correlate, display and respond to identified issues in real time
Design, deploy and maintain ArcSight network, asset and user modeling for your cyber-infrastructure

Upon successful completion of this course, you should be able to:

Plan for ALM implementation
Make ArcSight ESM operational upon initial installation, creating user accounts and implementing built-in solutions content
Implement Network and Asset Modeling facilities to enable site-specific business-oriented views within your ArcSight ESM environment
Investigate, identify, analyze, and remediate exposed security issues using ArcSight ESM monitoring and detection features
Use workflow management to provide real-time incident response and escalation tracking
Modify and run standard reports to provide situational awareness and network status to enterprise stakeholders
Establish ESM peering to perform distributed event search and content management across multiple ESM instances