ibm v4
7920  Reviews star_rate star_rate star_rate star_rate star_half

QRadar SIEM: Exploring reports, rules, and offenses (v7.5)

This IBM Self-Paced Virtual Class (SPVC) includes: - PDF course guide available to attendee during and after course - Lab environment where students can work through demonstrations and exercises at...

Read More
$475 USD
Course Code BQ320G-SPVC
Duration 5 hours
Available Formats Self Paced

This IBM Self-Paced Virtual Class (SPVC) includes:
- PDF course guide available to attendee during and after course
- Lab environment where students can work through demonstrations and exercises at their own pace

Communicating the details and statistics from your security investigation and proving your organization's compliance are crucial responsibilities. You want to present your findings so that upper management can clearly understand the results. That's where QRadar reports come in. Gain the skills you need to optimize your QRadar SIEM reports. 

 

Manage your organization's cybersecurity risks with up-to-date input by comparing your QRadar rules to the MITRE ATT@CK framework and install the updates that it recommends.

 

Customize your organization's dashboards and put custom rules in place to filter QRadar data. Security analysts appreciate getting the right data to investigate security incidents. 

 

Expand your capabilities in investigating security incidents with QRadar SIEM offenses.

Skills Gained

Upon successful completion of this course, you can:

  • Customize and generate QRadar reports
  • Create, edit and manage QRadar rules
  • Investigate QRadar offenses

Who Can Benefit

  • Security Analyst
  • Security Administrator

Prerequisites

null

Course Details

This course covers the following topics:

  • QRadar Reporting and dashboards
  • Custom Rule Engine (CRE)
  • QRadar Use Case Manager app
  • Working with offenses