IBM QRadar SIEM Foundations

The IBM QRadar SIEM Foundations course is a 3-day course that is designed to teach students how to use QRadar SIEM for asset profiles, collection, correlation,flows, normalization, secure storage of events, and vulnerabilities. QRadar SIEM classifies suspected attacks and policy violations as offenses. IBM QRadar SIEM provides deep visibility into network, user, and application activity.

BQ102G BQ103G

• Describing how QRadar SIEM collects data to detect suspicious activities
• Describing the QRadar SIEM component architecture and data flows
• Navigating the user interface
• Investigating suspected attacks and policy violations
• Searching, filtering, grouping, and analyzing security data
• Investigating events and flows
• Investigating asset profiles
• Describing the purpose of the network hierarchy
• Determining how rules test incoming data and create offenses
• Using index and aggregated data management
• Navigating and customizing dashboards and dashboard items
• Creating customized reports
• Using filters
• Using AQL for advanced searches
• Analyzing a real world scenario

Security analysts, security technical architects, offense managers, network administrators, and system administrators using QRadar SIEM.

• IT infrastructure
• IT security fundamentals
• Linux
• Windows
• TCP/IP networking
• Syslog

• Unit 1: Introduction to IBM QRadar
• Unit 2: IBM QRadar SIEM component architecture and data flows
• Unit 3: Using the QRadar SIEM User Interface
• Unit 4: Investigating an Offense Triggered by Events
• Unit 5: Investigating the Events of an Offense
• Unit 6: Using Asset Profiles to Investigate Offenses
• Unit 7: Investigating an Offense Triggered by Flows
• Unit 8: Using Rules
• Unit 9: Using the Network Hierarchy
• Unit 10: Index and Aggregated Data Management
• Unit 11: Using the QRadar SIEM Dashboard
• Unit 12: Creating Reports
• Unit 13: Using Filters
• Unit 14: Using the Ariel Query Language (AQL) for Advanced Searches
• Unit 15: Analyzing a Real-World Large-Scale Attack
• Appendix A: A real-world scenario introduction to IBM QRadar SIEM
• Appendix B: IBM QRadar architecture

Extensive lab exercises are provided to allow students an insight into the routine work of an IT Security Analyst operating the IBM QRadar SIEM platform.  Extensive lab exercises are provided to allow students an insight into the routine work of an IT Security Analyst operating the IBM QRadar SIEM platform.

Before taking this course, make sure that you have the following skills:

• IT infrastructure
• IT security fundamentals
• Linux
• Windows
• TCP/IP networking
• Syslog

The Integrating Avaya Aura Core Components (7120) course is a 5-day course that is designed to provide students hands-on experience with the integration of Avaya Aura Team Engagement Core Components, which includes System Manager, Session Manager, Communication Manager, and survivability. This course is part of the training curriculum that will help students to learn how to install and support Avaya Aura Release 7 Suite Licensing. This is the first of three course in a series for the ACIS curriculum.

• Key features and functionality of the core components in the Avaya Team Engagement Solution
• Deployment processes for the core products in the Avaya Team Engagement Solution
• Integration core components in the solution architecture
• Performing post-implementation configuration for the core components in the solution architecture
• Performing basic administration and troubleshooting for the Avaya core components

• Tier 1 technicians
• Students new to Avaya that will be responsible for the implementation and integration of the core products in the Avaya Aura Team Engagement Solution

No prerequisites are required for this course.