IBM Security QRadar SIEM Training
12K+ Satisfied learners Read Reviews

Introduction to SOC

• Building a successful SOC
• Functions of SOC
• Heart of SOC- SIEM
• Gartner’s magic quadrant

Introduction to Qradar

• QRadar SIEM component architecture and data flows
• Using the QRadar SIEM User Interface

Working with logs

• Working with offense triggered by events
• Working with offense triggered by flows
• Working with events of an offense

Monitoring

• Monitor QRadar Notifications and error messages.
• Monitor QRadar performance
• Review and interpret system monitoring dashboards.
• Investigate suspected attacks and policy breaches
• Search, filter, group, and analyze security data

Intercept

• Investigate the vulnerabilities and services of assets
• Investigate events and flows
• Use index management
• Index and Aggregated Data Management
• Use AQL for advanced searches
• Creating Alerts for intrusions
• Explain error messages and notifications.
• Analyze a Real-World Scenario.
• Creating Reports
• Case Studies

Advanced Topics

• Creating log source types
• Leveraging reference data collections
• Developing custom rules
• Creating Custom Action Scripts
• Developing Anomaly Detection Rules