Courses
IBM QRadar SIEM Advanced Topics
25 July 2024 | Written by: Brian White
Categorized: Courses
Share this post:
Course update: IBM QRadar SIEM Advanced Topics
QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses.
This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned.
What you learn:
- Create custom log sources
- Work with reference data collections and custom rules
- Use X-Force data and Threat Intelligence app
- Use the Use Case Manager app
- Use User Behavior Analytics (UBA) and QRadar Advisor
- Discover and perform tuning
- Explore custom action scripts
- Integrate QRadar with IBM SOAR
Skills you gain:
- Threat investigation
- QRadar data searching
- QRadar X-Force integration
- QRadar incident response
The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.
The Instructor-led version of this course (BQ205G) has a duration of 16 hours and includes extensive lab exercises. This course replaces course BQ204G.
The Self-paced version of this course (BQ205XG) has a duration of 16 hours. Access is allowed for 12 months with 31 days of lab access. This course replaces BQ204XG.
IBM QRadar SIEM Foundations
Course update: IBM QRadar SIEM Foundations IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the […]
Getting started with automation builder on IBM watsonx Orchestrate
A course on how to build automations on IBM watsonx Orchestrate is being brought into the light! If you are a user with previous automation experience and are new to Orchestrate, this course is for you. In the IBM watsonx Orchestrate: Getting Started with Automation Builder course, you find 7 modules to learn how to […]
Check out the new Order and Inventory Management courses that are now available, including courses on Sterling Order Management System and Sterling Intelligent Promising
Sterling Order Management System: Configure item and Pricing This is a 10-hour long self-paced course that gives you an overview of the item and pricing concepts along with an introduction to the IBM Sterling Business Center application. The course teaches students to perform item, pricing, and other related configurations using the Sterling Business Center application. Through a […]