IBM QRadar SIEM - A Step-by-Step BootCamp

Focused View

Hatem Metwally

12:49:06

286 View

1. Introduction and Course Agenda

1. Introduction.mp4

12:23

2. QRadar Overview

1. Architecture.mp4

46:46

2. All-In-One Installation.mp4

32:20

3. Console GUI demystified, QRadar Services and Replay Events & Flows.mp4

53:05

4. IBM Security QRadar XDR - The Big Picture.html

5. Quiz1.html

3. Threat Hunting

1. Offense, Event, and Flow investigation.mp4

45:38

2. Customized searches.mp4

46:17

3. Basic (Quick) and Advanced (AQL) queries.mp4

54:33

4. Extract Custom Event properties.mp4

24:50

4. Rules and Building Block Design

1. Part 1.mp4

01:30:07

2. Part2.mp4

01:00:15

5. Log Integration and DSM Development

1. Log Integration and DSM Development.mp4

01:13:58

6. WinCollect

1. WinCollect Part1 - Theoritical.mp4

01:31:48

2. WinCollect Part2 - Wincollect 7.mp4

02:00:42

3. WinCollect Part 3 - WinCollect 10.mp4

16:24

Description

Tackle cyber threats in real time by using powerful, scalable, and efficient SIEM security software.

What You'll Learn?

Security Information and Event Management
SIEM
IBM QRadar SIEM
Hands-ON
Use Cases

Who is this for?

Network Security Specialists & Administrators

SOC Operators & Analysts

Information Security Sepcialists

More details

Description
Do you want to enter the SIEMÂ field? Do you want to learn one of the leaders SIEMÂ technologies?Â

Do you want to understand the concepts and gain the hands-on on IBMÂ QRadar SIEM?

Then this course is designed for you. Through baby steps you will learn IBMÂ QRadar SIEM

Important topics that you will learn about in this course include but not limited to the following:

The course is covering below topics:
- QRadar architecture
- QRadar components
- All-In-One installation
- Console GUI demystified, QRadar Services and Replay Events & Flows
- Offense, Event, Flow investigation
- Describe the use of the magnitude of an offense
- Offense management (retention, chaining, protection)
- Identify events not correctly parsed and their source
- Customized searches
- Log Integration and DSM Development
- Rules and Building Block Design
- AQL queries
- Custom properties
- WinCollect
- X-Force App Exchange, Content Packs and Pulse Installation and Troubleshooting
- QRadar Assistant App
- Install QRadar Content Packs using the QRadar Assistant App
- Reference Data Types and Management
- Analyze Building Blocks Host definition, category definition, Port definition
- Tuning building blocks and Tuning Methodology
- Use Case Manager app, MITRE threat groups and actors
- Dashboarding and Reporting
- Clean SIMÂ Model
- Attack Simulation and Sysmon Process Profiling
- Rule Routing options, Rule Routing combination options and License Giveback
- Backup and restore
- Ingesting QRadar offenses into FortiSOAR
- Custom Integration with FortiGate Firewall to Block User's PC from Accessing the Internet
- Postman - An API Call Development Methodology
Who this course is for:
Network Security Specialists & Administrators
SOC Operators & Analysts
Information Security Sepcialists

User Reviews

Rating

average 0

Total votes0

Focused display

MBA - Business Analytics, CISSP, CISM, SIEM Specialist, and 13+ years of experience into Network and Information Security.+++++++ +++++++ +++++++ EDUCATION +++++++ +++++++ +++++++ QATAR UNIVERSITY, MBA - BUSINESS ANALYTICSThe MBA program in Qatar University is AACSB accredited which ensures that business schools meet the highest standards of excellence in teaching, research, curriculum, and learner success. Started the program in Fall 2019 and graduated in Spring 2022 with GPA of 3.95 and concentrated in Business Analytics by electing courses in Business Analytics and Data Mining beside core courses in Corporate Finance, Operations Management, Managerial Accounting and Managerial Economics.AIN SHAMS UNIVERSITY, BSC. IN COMPUTRS AND SYSTEMS ENGINEERINGFrom 1998 ~ 2003 – Grade: Distinguished with Honor

Udemy

View courses Udemy

Students take courses primarily to improve job-related skills.Some courses generate credit toward technical certification. Udemy has made a special effort to attract corporate trainers seeking to create coursework for employees of their company.