SIEM Admin – Incident Handing Training – SOC Team

Learn about SIEM tools HP Arcsight, IBM QRadar, RSA Security Analytic, Splunk, McAfee Nitro required for in SOC

Created by: Vikram Saini
Cyber Security Expert | Threat Hunting | Incident Response

What Will I Learn?

• What is the SIEM
• SIEM Business Requirement
• Integration Configuration of Data sources [Splunk]
• SIEM Architechture of HP Arcsight, IBM QRadar, Splunk, RSA SA & McAfee Nitro
• Administration of Configuration of Multiple SIEM (HP Arcsight, IBM QRadar, Splunk, RSA SA & McAfee Nitro)
• Roles of Different SIEM Component of HP Arcsight, IBM QRadar, Splunk, RSA SA & McAfee Nitro
• Event Life Cycle in SIEM Solution HP Arcsight, IBM QRadar, Splunk, RSA SA & McAfee Nitro
• Alert Creation in [Splunk]
• Creating Dashboards for Attack Analysis [Splunk]
• Report Configuration [Splunk]
• Building Industry Based Use Cases [Splunk]
• Event Monitoring [Splunk]
• Fine Tuning Of Alerts [Splunk]
• Real World Incident Response Investigation [Splunk]
• What is Cyber Kill Chain
• How to develop effective USECASE in SIEM
• How to Evaluate a SIEM tool

Requirements

• SOC Analyst Training [By Vikram Saini]
• Be able to understand the basic of windows and networks

Target audience

• College Student looking for Cyber Security Opportunity.
• Security Engineer curious about SIEM
• SOC Analyst looking for SIEM Administration Training
• Network Engineer looking for change in Cyber Security
• Sr. SOC Analyst looking for learn multiple SIEM tools