YoVDO

IBM Security QRadar Functions and Capabilities

Offered By: Pluralsight

Tags

IBM Security QRadar Courses Cybersecurity Courses Network Traffic Analysis Courses

Course Description

Overview

IBM Security QRadar is one of the most used SIEM solutions
in the market. This course will teach you the fundamental
knowledge required to work with QRadar in a Security
Operations Centre.

The heart of a Security Operations Centre (SOC) is a SIEM solution. It is in this solution that we aggregate all the events and network traffic so we can detect anomalies and threats. In this course, IBM Security QRadar Functions and Capabilities, you’ll learn the essentials about the QRadar SIEM as well as how to use this tool in the day-to-day activities of a SOC. First, you’ll explore the overall QRadar architecture and how it collects data from data sources. Next, you’ll discover how to analyze events and network traffic using the QRadar tool. Finally, you’ll learn how to investigate offenses and generate reports. When you’re finished with this course, you’ll have the skills and knowledge of QRadar needed to deliver the day-to-day tasks of a SOC.

Syllabus

  • Course Overview 1min
  • QRadar Basic Concepts 24mins
  • Data Collection 14mins
  • Events 37mins
  • Flows 13mins
  • Offenses 16mins
  • Rules 14mins
  • Assets 10mins
  • Reports and Dashboards 26mins

Taught by

Ricardo Reimao

Related Courses

Computer Security
Stanford University via Coursera
Cryptography II
Stanford University via Coursera
Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera
Building an Information Risk Management Toolkit
University of Washington via Coursera
Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network