Threat Hunt with IBM Security QRadar

Focused View

Ricardo Reimao

1:41:29

53 View

Exercise Files

ibm-security-qradar-threat-hunt.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:26

Module 2 - The Threat Hunting Process

1. Understanding Threat Hunting.mp4

05:29

2. The Threat Hunting Process.mp4

05:30

3. Hunting Notes and Case Timeline.mp4

04:49

Module 3 - Case 1 - Intelligence-based Threat Hunting

1. Threat Intelligence and Known IoCs.mp4

03:26

2. Manual IoC Analysis.mp4

02:00

3. Exploring Threat Intelligence Feeds.mp4

06:55

4. Searching for Known IoCs.mp4

11:31

5. Automated IoC Detection.mp4

06:02

6. Case Reporting.mp4

03:27

7. Detection Improvement.mp4

05:15

Module 4 - Case 2 - Behavior-based Threat Hunting

1. Understanding Behavior-based Hunting and the Pyramid of Pain.mp4

03:57

2. Approaches to Behavior-based Hunting.mp4

03:59

3. User Behavior Hunting with the UBA App.mp4

09:19

4. Adjusting the UBA Rules.mp4

03:06

5. System Behavior Hunting with Long Tail Analysis.mp4

09:29

6. Case Reporting.mp4

01:44

7. Detection Improvement.mp4

10:24

8. Course Closure.mp4

03:41

Description

The threat hunter is responsible for investigating malicious activity on the environment and detecting advanced persistent threats (APTs). This course will teach you how to hunt for threats using the IBM Security QRadar SIEM.

What You'll Learn?

The IBM Security QRadar is a complete SIEM solution that helps you to detect threats and investigate cyber-attacks. In this course, Threat Hunt with IBM Security QRadar, you’ll learn how to investigate malicious activity and detect advanced persistent threats (APTs) using the QRadar SIEM solution. First, you’ll explore the overall threat hunt process and the hunting best practices. Next, you’ll discover through our demos how to find indicators of compromise and detect threats using behavior techniques and the QRadar SIEM. Finally, you’ll learn how to improve your detection mechanisms based on the results of your hunting. When you’re finished with this course, you’ll have the skills and knowledge of QRadar needed to threat hunt.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Cyber Security

Ricardo Reimao

Instructor's Courses

Ricardo is a Cybersecurity Consultant based in Toronto (Canada). He has 14+ years of IT experience, 10 of them in the IT Security field. His main interests are: SIEM solutions (IBM QRadar), Enterprise Security Risk, Penetration Testing, Security processes/procedures and Network Security.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.