IBM QRadar SIEM Foundations

Institut: ETC - Enterprise Training Center GmbH
Bereich: Technik, EDV, Telekommunikation
Kurs merken
Anmelden

Kursbeschreibung

IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned. In this 3-day instructor-led course, you learn how to perform the following tasks: Describe how QRadar collects data to detect suspicious activities Describe the QRadar architecture and data flows Navigate the user interface Define log sources, protocols, and event details Discover how QRadar collects and analyzes network flow information Describe the QRadar Custom Rule Engine Utilize the Use Case Manager app Discover and manage asset information Learn about a variety of QRadar apps, content extensions, and the App Framework Analyze offenses by using the QRadar UI and the Analyst Workflow app Search, filter, group, and analyze security data Use AQL for advanced searches Use QRadar to create customized reports Explore aggregated data management Define sophisticated reporting using Pulse Dashboards Discover QRadar administrative tasks Extensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics: - Architecture exercises - UI Overview exercises - Log Sources exercises - Flows and QRadar Network Insights exercises - Custom Rule Engine (CRE) exercises - Use Case Manager app exercises - Assets exercises - App Framework exercises - Working with Offenses exercises. - Search, filtering, and AQL exercises - Reporting and Dashboards exercises - QRadar Admin tasks exercises The lab environment for this course uses the IBM QRadar SIEM 7.5 platform. After completing this course, you should be able to perform the following tasks: - Describe how QRadar collects data to detect suspicious activities - Describe the QRadar architecture and data flows - Navigate the user interface - Define log sources, protocols, and event details - Discover how QRadar collects and analyzes network flow information - Describe the QRadar Custom Rule Engine - Utilize the Use Case Manager app - Discover and manage asset information - Learn about a variety of QRadar apps, content extensions, and the App Framework - Analyze offenses by using the QRadar UI and the Analyst Workflow app - Search, filter, group, and analyze security data - Use AQL for advanced searches - Use QRadar to create customized reports - Explore aggregated data management - Define sophisticated reporting using Pulse Dashboards - Discover QRadar administrative tasks
IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned. In this 3-day instructor-led course, you learn how to perform the following tasks: Describe how QRadar collects data to detect suspicious activities Describe the QRadar architecture and data flows Navigate the user interface Define log sources, protocols, and event details Discover how QRadar collects and analyzes network flow information Describe the QRadar Custom Rule Engine Utilize the Use Case Manager app Discover and manage asset information Learn about a variety of QRadar apps, content extensions, and the App Framework Analyze offenses by using the QRadar UI and the Analyst Workflow app Search, filter, group, and analyze security data Use AQL for advanced searches Use QRadar to create customized reports Explore aggregated data management Define sophisticated reporting using Pulse Dashboards Discover QRadar administrative tasks Extensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics: - Architecture exercises - UI Overview exercises - Log Sources exercises - Flows and QRadar Network Insights exercises - Custom Rule Engine (CRE) exercises - Use Case Manager a…
Beginn
11.01.2027
Ende
13.01.2027
Uhrzeit
ca 09:00 - 16:00 Uhr
Dauer
21.0 LE
Ort
ETC-Wien
Weitere Termine Standort Kosten
02.11.2026 - 04.11.2026 (zum Kurs) VILT € 2.550
exkl. 20% MwSt
02.11.2026 - 04.11.2026 (zum Kurs) VILT € 2.550
exkl. 20% MwSt
11.01.2027 - 13.01.2027 (zum Kurs) ETC-Wien € 2.550
exkl. 20% MwSt
01.02.2027 - 03.02.2027 (zum Kurs) ETC-Wien € 2.550
exkl. 20% MwSt
01.02.2027 - 03.02.2027 (zum Kurs) ETC-Wien € 2.550
exkl. 20% MwSt
E-Mail
info@etc.at
Kontakt
Mathias Leiner
Ort
ETC - Enterprise Training Center
Straße
Modecenterstrasse 22/Office 4
PLZ
1030
Ort
Wien
Land
Österreich
Bundesland
Wien
Tel
+431533 17 77-99
Fax
+431533 17 77-85
Before taking this course, make sure that you have the following skills: - IT infrastructure - IT security fundamentals - Linux - Windows - TCP/IP networking - Syslog
Zielgruppe
This course is designed for security analysts, security technical architects, offense managers, network administrators, and system administrators using QRadar SIEM.
Kosten
€ 2.550
exkl. 20% MwSt
Kursnummer
BQ105G

Diese Kurse könnten Sie auch interessieren ...

Barrierefreies Bauen Heizungstechnik (IGT) - Vorbereitung Labor Prüfarbeit LAP KI im Controlling MS-Teams - Ein starkes Tool für die Online-Kommunikation KI: Künstliche Intelligenz, Workshop: Forschung & Entwicklung Introduction to Microsoft 365 and AI administration Introduction to Microsoft 365 and AI administration GitHub Advanced Security GitHub Advanced Security E-Mail Marketing - Best Practices E-Mail Marketing - Best Practices Prezi - Effektvolle Präsentationen Prezi - Effektvolle Präsentationen Kombinationskurs PSAgA - Anwender & die Bedienung von Hubarbeitsbühnen KI in der Wirtschaft (Modul 2) Mit Prompts und KI-Agenten produktiver arbeiten Modul 4 - Vorschriften (2a) - C95/D95 - Weiterbildung für Berufskraftfahrer:innen Grasshopper Die TOP Baukauffrau // Der TOP Baukaufmann Jahresabschluss in der Baubranche NIS-2 / NISG 2026 - Sicherheit für Netz- und Informationssysteme KI im Marketing für KMUs: Online-Lernstrecke Unix System Administration Excel Bearbeitung von großen Listen Datenbanken mit MySQL Anwenderschulung Maschinschreiben Basis Betriebsleiter - Schlepplifte Lehrgang zum/zur Abfallbeauftragten AZ-104 Microsoft Azure Administrator (AZ-104T00) Information Security Manager nach ISO 27001 IREB Certified Professional for Requirements Engineering Foundation Level (CPRE-FL) Online Data Analytics - Datenvisualisierung für Management Reporting Allround-Schweißkurs für Anfänger:innen PC-Einsteiger:in EDV Perfektion Kälteanlagentechnik - Vorbereitung auf die ao. LAP (Zusatzprüfung) CompTIA Network+ Grundlagen der Programmierung Administrator Expert Power Platform Functional Consultant Associate Programming in HTML with JavaScript and CSS Visual Basic .NET Programmierung I Visual Basic for Applications Word Visual Basic for Applications Excel Windows Basic SharePoint Sites erstellen Adobe-Photoshop Basic Barrierefreies Web Typo3 Basic BricsCAD 2D Grundlagen JAVA, Advanced Object Oriented Programming JAVA, Advanced Object Oriented Programming Networking Technologies, Fundamentals Networking Technologies, Fundamentals Microsoft Office, Vertiefung und Effizienzsteigerung Microsoft Office, Vertiefung und Effizienzsteigerung Windows Server, Administration Windows Server, Administration IT Security, Hacking: Cloud & Container Security IT Security, Hacking: Cloud & Container Security Ausbildung zum Führen von Hubstaplern Hydraulik 2 Aufbau Staplerführer:in - (gemäß § 6 Z 2 FK-V) Business Data Analyst: Einstieg in die Datenanalyse mit Excel und Power BI Diplomlehrgang: Rhinoceros 3D / V-Ray / Lumion Diplomlehrgang: Rhinoceros 3D / 3D Druck Rhinoceros 3D / Lumion Rhinoceros 3D / 3D Druck Rhinoceros 3D CLO3D - Digitale Modegestaltung & 3D-Simulation Diplomlehrgang: SketchUp / V-Ray / Lumion Lehrgang - SketchUp / 3D Druck / Lumion SketchUp / Lumion SketchUp / 3D Druck SketchUp Diplomlehrgang: 3DS Max / V-Ray / Lumion Diplomlehrgang: 3DS Max / 3D Druck 3DS Max / Lumion 3DS Max / 3D Druck 3DS Max Der Copilot in Microsoft 365 - Überblick Unreal Engine für Architektur Blender / Lumion Blender / 3D Druck Blender Cinema 4D / Lumion Cinema 4D Maya Online: Excel Kurs: Grundlagen – Basiswissen für EinsteigerInnen (E-11-26) Diplomlehrgang: ArchiCAD & Lumion Diplomlehrgang: ArchiCAD & 3D Druck Lehrgang: ArchiCAD ArchiCAD ArchiCAD - Grundlagen Linux für Umsteiger*innen Diplomlehrgang: Revit, Navisworks & Dynamo Diplomlehrgang: Revit & 3D Druck Diplomlehrgang: Revit MEP Diplomlehrgang: Revit & Lumion Lehrgang: Revit Revit - Grundlagen Revit - Grundlagen - Intensivkurs Revit, Navisworks & Dynamo - Intensivkurs Revit MEP / HKLS - Intensivkurs Fusion 360 Diplomlehrgang: AutoCAD, AutoLISPT & KI Lehrgang: AutoCAD AutoCAD - Grundlagen Lehrgang: SolidWorks SolidWorks SolidWorks Kfz § 57a KFG Grundlagenseminar bis 3,5t Ausbildung in der Koordinatenmesstechnik - AUKOM - Form und Lage Simatic S7 - TIA Portal MS Excel for Business Marketing für die Assistenz ISTQB Certified Tester - Foundation Level v4.0 (CTFL) Online ISAQB Certified Professional for Software Architecture - Foundation Level (CPSA-F) Online Microsoft® Excel Aufbau PC-Einstieg PC-Einstieg Schutzgasschweißen MAG (MM I) Schutzgasschweißen WIG (MW I) Führen von Hubstaplern Excel für Selbsterlernte Excel für Selbsterlernte Excel für Selbsterlernte Web Developer:in - PHP, SQL, Laravel für Einsteiger:innen - Diplomlehrgang ArchiCAD Grundlagen Official ISC2 CISSP Training – 6 Tage Österreich Dachdecker - Vorbereitungskurs auf die Meisterprüfung Bauspengler - Vorbereitungskurs auf die Meisterprüfung Adobe Premiere Pro – Einsteiger*innen Was ist Künstliche Intelligenz? Vorbereitungskurs auf die Lehrabschlussprüfung für die Wiederholungsprüfung Kfz-Technik SQL Server, Querying Data with Transact-SQL SQL Server, Querying Data with Transact-SQL MAG-Schweißen Kompaktkurs Microsoft Azure, Developing Solutions for Microsoft Azure Microsoft Azure, Developing Solutions for Microsoft Azure Microsoft Azure, Administering Microsoft Azure, Administering ISMS (ISO 27001, BSI), Workshop zur Umsetzung ISMS (ISO 27001, BSI), Workshop zur Umsetzung SEA - Search Engine Advertising AutoCAD 2D Grundlagen - Online AutoCAD® 2D - Grundlagen VMware Cloud Foundation: Solution Architecture and Design (VCFSAD) ITIL® (Version 5) Foundation und Zertifizierung ITIL® (Version 5) Foundation und Zertifizierung CISM Certified Information Security Manager CISM Certified Information Security Manager iSAQB® Certified Professional for Software Architecture - Foundation Level (CPSA-F) ITIL® 4 Practice Manager - Lehrgang ITIL® 4 Practice Manager - Lehrgang Ausbildung zum zertifizierten Social Media Manager Ausbildung zum zertifizierten Social Media Manager ISTQB Certified Tester - Foundation Level v4.0 (CTFL) Spring / SpringBoot Ökosystem Spring / SpringBoot Ökosystem VMware vSphere: Operate, Scale and Secure [V8] VMware NSX: Install, Configure, Manage [V4.0] Collaboration Communications Systems Engineer Collaboration Communications Systems Engineer AWS Security Essentials Linux Administration - Lehrgang (LPIC-1) Linux Administration - Lehrgang (LPIC-1) Linux LPIC-2 Training inkl. Zertifizierung Linux LPIC-2 Training inkl. Zertifizierung Microsoft Identity and Access Administrator Microsoft Identity and Access Administrator Automating Administration with PowerShell Automating Administration with PowerShell Python Programmierer - Lehrgang Python Programmierer - Lehrgang Programmierung - Grundlagen Programmierung - Grundlagen ITIL® 4 Specialist: Create, Deliver and Support (CDS) ITIL® 4 Specialist: Create, Deliver and Support (CDS) ITIL® 4 Foundation und Zertifizierung ITIL® 4 Foundation und Zertifizierung AutoCAD 2D - Lehrgang AutoCAD 2D - Lehrgang Linux - Administration Linux - Administration Check Point Certified Security Administrator R82 Check Point Certified Security Administrator R82 AutoCAD - 3D-Konstruktion AutoCAD - 3D-Konstruktion PRINCE2® Foundation und Practitioner (Bundle) PRINCE2® Foundation und Practitioner (Bundle) AutoCAD - Grundlagen AutoCAD - Grundlagen PRINCE2® Foundation und Zertifizierung PRINCE2® Foundation und Zertifizierung VMware vSphere: Install, Configure, Manage [V8] Microsoft PowerPoint - Folienmaster Microsoft PowerPoint - Folienmaster Programming in HTML5 with JavaScript and CSS3 Programming in HTML5 with JavaScript and CSS3 PC-Einstieg für Senior:innen - Aufbau