IBM Qradar SIEM: Beginner to Advanced

• An understanding of IT security

Audience

• Security Engineers

IBM Qradar SIEM is a security analytic suite for gaining insight into critical threats. Using IBM Qradar SIEM, users can gain insights, identify threats, and automate security intelligence.

This instructor-led, live training (online or onsite) is aimed at security engineers who wish to use IBM Qradar SIEM to address pressing security use cases.

By the end of this training, participants will be able to:

• Gain visibility into enterprise data across on-premise and cloud environments.
• Automate security intelligence to hunt threats and to contain risks.
• Detect, identify, and prioritize threats.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Introduction

IBM Qradar SIEM Overview

• What is IBM Qradar SIEM?
• IBM Qradar SIEM features

Preparing the IBM Qradar SIEM

• Installing and configuring IBM Qradar SIEM

Security Information and Event Management

• Working with IBM Qradar SIEM processes
• Using IBM Qradar SIEM offense engine
• Managing users and data
• Managing false positives
• Working with data retention

Vulnerability Manager

• Working with IBM Qradar QVM processes

Risk Manager

• Working with IBM Qradar QRM configurations

Incident Forensics

• Working with IBM Qradar QRIF and IBM Qradar QRMIF

Troubleshooting

Summary and Conclusion