IBM QRadar SIEM Advanced Topics

BQ205G
Duration 2 days
0 ITK points
10 terms
Praha (26 800 Kč)

Brno (on request)

Bratislava (1 075 €)

QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned. The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

This course is designed for security administrators and security analysts.

Learn how to create custom log sources
Discover how to work with reference data collections and custom rules
Use X-Force data and Threat Intelligence app
Use the Use Case Manager app
Learn how to use UBA and QRadar Advisor
Discover Tuning
Explore Custom action scripts
Discuss Integration with IBM SOAR

Students should be knowledgeable about the following topics:

IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
Syslog
Foundational skills for the IBM QRadar Security Intelligence Platform (at least the skills that are taught in the IBM QRadar SIEM Foundations - BQ104 course)

Studijní materiál IBM

Custom log sources
Reference data collections and custom rules
IBM X-Force Threat Intelligence in QRadar
User Behavior Analytics and Advisor with Watson
Tuning
Custom action scripts
IBM SOAR integration

Download PDF detail
Download PDF detail (no terms)

The prices are without VAT.

IBM QRadar SIEM Advanced Topics

GOPAS Praha

GOPAS Brno

GOPAS Bratislava

Business details