SIEM - Security Information and Event Management (EN)

Popis kurzu

Security operations do not suffer from the problem of "big data", but from the problem of "data analysis". Monitoring tools have become an integral part of the IT world. Those who do not use automated incident assessment tools cannot expect and guarantee an adequate level of security. Let's face it, there are several ways to store, process, and analyze large amounts of data without a real emphasis on gaining an overview of the information collected. Our training will help you better prepare for the implementation and operation of the SIEM solution, regardless of the selected vendor.

• Why SIEM (what is that thing?)


• What do I need? (a.k.a. Hitchhiker guide to the SIEM)


• Regulations


• Analysis (I have logs!! And I can read them! Or maybee not.. )


• Incident handling


• When implementing a SIEM, goes wrong…

Cíle kurzu

• What is SIEM technology and how to implement, configure and fine-tune SIEM


• How to use SIEM for business intelligence


• Practical experience with the deployment of SIEM technologies


• Preview how to monitor, identify, document and respond to security threats and reduce false positives

Určeno pro

• IT security administrators


• IT security managers


• CISO

Předpoklady

Studijní materiály