IBM Security QRadar SIEM 7.2 Administration and Configuration (SPVC)
Kurs
In München
Beschreibung
-
Kursart
Kurs
-
Ort
München
This intermediate course is for Security administrators, security analysts, security technical architects, offense managers, network administrators, professional services using QRadar SIEM, and QRadar SIEM administrators. Das Zentrum IBM präsentiert das folgende Programm, mit dem Sie Ihre Kompetenzen stärken sowie Ihre gesteckte Ziele erreichen können. In dem Kurs zu dieser Schulung gibt es verschiedene Module zur Auswahl und Sie können mehr über die angebotenen Thematiken erfahren. Einfach anmelden und Zugang zu den folgenden Themen erhalten
Standorte und Zeitplan
Lage
Beginn
Beginn
Hinweise zu diesem Kurs
You should have the following skills:
IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
Log files and events
QRadar SIEM user interface
Successfully completed IBM Security QRadar SIEM 7.1 MR2 Foundations
Meinungen
Themen
- IBM
Inhalte
IBM Security QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, topologies, and vulnerabilities. QRadar SIEM classifies suspected attacks and policy breaches as offenses. Using the skills taught in this course, you will be able to manage QRadar SIEM, work with log sources, analyze the offenses created by rules, and tune your rules to fit your production environment.
If you are enrolling in a Self Paced Virtual Classroom or Web Based Training course, before you enroll, please review the Self-Paced Virtual Classes and Web-Based Training Classes on our Terms and Conditions page, as well as the system requirements, to ensure that your system meets the minimum requirements for this course.
http://www.ibm.com/training/terms
Training Paths that reference this course are:
- Security skills journey
Zusätzliche Informationen
- Use tools on the Admin tab to manage administrative functions
- Build a network hierarchy
- Use administration tools to manage assets, Reference Sets, and the index
- Configure user accounts and remote authentication
- Use backups, recovery, and retention buckets to manage data
- Manage log and flow data sources
- Integrate Windows log collection agents with QRadar SIEM
- Create customized log sources using universal DSM
- Explain CRE rules and how they work
- Use and create CRE and ADE rules
- Identify and tune false positives
- Apply Reference maps to QRadar SIEM rules
IBM Security QRadar SIEM 7.2 Administration and Configuration (SPVC)