Virtual Live Instructor
Free Training Materials
Convenient Scheduling
Course Details
Course Description:
The IBM QRadar SIEM Advanced Topics course is a 2-day course that is designed to teach students how to configure processing of uncommon events, work with reference data, and develop custom rules, custom actions, and custom anomaly detection rules. IBM Security QRadar enables you to minimize the time gap between when a suspicious activity occurs and when you detect it. Attacks and policy violations leave their footprints in log events and network flows of your IT systems. To connect the dots, QRadar SIEM correlates these scattered events and flows into offenses that alert you to suspicious activities.
Topics covered in the course include:
- Creating custom log sources to utilize events from uncommon sources
- Creating, maintaining, and using reference data collections
- Developing and managing custom rules to detect unusual activity in your network
- Developing and managing custom action scripts to for automated rule reponse
- Developing and managing anomoly detection rules to detect when unusual network traffic patterns occur
Target Student:
This course is suitable for all students
Prerequisites:
IT infrastructure
IT security fundamentals
Linux
Microsoft Windows
TCP/IP networking
Log files and events
Network flows
You should also have completed the IBM QRadar SIEM Foundations course.
Course Outline
Module 1: Creating log source types
Module 2: Leveraging reference data collections
Module 3: Developing custom rules
Module 4: Creating Custom Action Scripts
Module 5: Developing Anomaly Detection Rules
IT infrastructure
IT security fundamentals
Linux
Microsoft Windows
TCP/IP networking
Log files and events
Network flows
You should also have completed the IBM QRadar SIEM Foundations course.
Testimonials
This was the class I needed.
The instructor Jeff took his time and made sure we understood each topic before moving to the next. He answered all of our questions, and I don't know about the rest of the students, but was very pleased with this experience.
I finally understand how to use Excel.
-Amanda T (Yale New Haven Hospital).
Great class!
We were able to cover a lot of information in one day without getting overwhelmed.
-Maria R (Microsoft).
Public Class Schedule
Instructor led training is a cost effective and convenient learning platform for busy professionals. Most courses are available at over 300 locations nationwide and Online.
The classes are taught via the RCI method by professionally certified instructors, and are usually limited to 12 or less students. Each student receives a training manual and practice problems, along with a free course retake. Click here to learn more about Instructor Led Training
Below is a list of upcoming IBM-Security Instructor Led Class Dates:
We offer private IBM group training services for organizations looking to upskill their team members with a live-instructor.
Training options include:
Learn more about how IBM Private Group Training from Business Computer Skills can help your team.
