ESM180 – Building Security Use Cases with ArcSight ESM

Kód kurzu: ESM180

Táto časť nie je lokalizovaná

Building Security Use Cases with ArcSight ESM provides you with detailed knowledge of the ArcSight security problem solving methodology, within the ESM context. In this course, you learn the methodologies to develop use cases for current business scenarios, derived from the top business drivers in the market.

2 412 EUR

2 894 EUR s DPH

Výber termínov

Máte otázku?

+420 731 175 867 edu@edutrainings.cz

Odborní
certifikovaní lektori

Mezinárodne
uznávané certifikácie

Široká ponuka technických
a soft skills kurzov

Zobraziť soft skills kurzy

Skvelý zákaznicky
servis

Prispôsobenie kurzov
presne na mieru

Termíny kurzov
Popis kurzu
Cieľová skupina
Štruktúra kurzu
Predpokladané znalosti

Termíny kurzov

Počiatočný dátum: Na vyžiadanie

Forma: Prezenčná/Virtuálna

Dĺžka kurzu: 3 dni

Jazyk: en/cz

Cena bez DPH: 2 412 EUR

Registrovať

	Počiatočný dátum	Miesto konania	Forma	Dĺžka kurzu	Jazyk	Cena bez DPH
	Na vyžiadanie		Prezenčná/Virtuálna	3 dni	en/cz	2 412 EUR	Registrovať
G	Garantovaný kurz

Nenašli ste vhodný termín?

Napíšte nám o vypísanoe alternatívneho termínu na mieru.

Kontakt

Popis kurzu

Táto časť nie je lokalizovaná

Identify business drivers to develop Use Cases using ArcSight ESM
Identify Use Case problems and requirement statements associated with actual scenarios
Using the Use Case worksheet, document the use case
Develop ArcSight ESM content to accommodate Use Case discrete objectives

Cieľová skupina

Táto časť nie je lokalizovaná

This advanced course is intended for those whose primary responsibilities include:

Defining organization’s security objectives
Building ArcSight ESM content to adhere to those objectives.

Štruktúra kurzu

Táto časť nie je lokalizovaná

Upon successful completion of this course, you should be able to:

In an ArcSight ESM context, define Use Case
Using the Use Case worksheet from an initial problem statement, generate requirement statements and prioritize objectives
Identify data sources and ESM resources required to fulfil the objectives of the use case
Create identified ESM content
Construct ArcSight Active Channels to provide advanced analysis of the event stream
Develop ArcSight Rules to allow correlation activities
Build event-based data monitors to provide real-time viewing of event traffic
Package formulated ESM content for Use Case into ArcSight Resource Bundle

Predpokladané znalosti

Táto časť nie je lokalizovaná

To be successful in this course, you should have the following prerequisites or knowledge:

Common network device functions, such as routers, switches, hubs, etc.
TCP/IP functions, such as CIDR blocks, subnets, addressing, communications, etc.
Windows operating system tasks, such as installations, services, sharing, navigation, etc.
SIEM terminology, such as threat, vulnerability, risk, asset, exposure, safeguards, etc.
Security directives, such as Confidentiality, Integrity, Availability