0% found this document useful (0 votes)
95 views1 page

Elastic Security Fundamentals Siem

Uploaded by

molotof212
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
95 views1 page

Elastic Security Fundamentals Siem

Uploaded by

molotof212
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 1

SECURITY ANALYTICS COURSE OUTLINE

ELASTIC SECURITY FUNDAMENTALS: SIEM COURSE INFORMATION

A powerful SIEM is one of the most important tools a security analyst can wield. In this self-paced, Audience
on-demand course, you’ll learn how to leverage Elastic SIEM to drive your security operations and Security Analysts and practitioners that
threat hunting. This course is designed for security analysts and practitioners who have used other has a basic understanding of SIEM in
SIEMs or are familiar with SIEM concepts. As a security analyst, you will learn how to stand up and use general

Elastic SIEM, including exploring its interface, configuring data ingestion, and leveraging prebuilt
Duration
machine learning jobs to hunt down anomalies. By the end of this course, you will be ready to use
2-3 hours
Elastic SIEM to detect threats to your infrastructure, enabling you to protect and respond at the
speed of Elasticsearch.
Language
English

LESSONS Prerequisites
All lessons include a hands-on lab. Basic understanding of what a SIEM is and
typical data involved

Elastic SIEM UI Anomaly detection


Requirements
Get an introduction and an overview to Elastic Discover the potential of using machine
• Stable internet connection
SIEM. Learn about the user interface and how to learning anomaly detection functionality within
• Mac, Linux, or Windows
use it in analysis of host-related and the SIEM app to complement analysis. Get an
• Latest version of Chrome or Firefox
network-related security events as part of alert overview of prebuilt jobs that can automatically (other browsers not supported)
investigations or interactive threat hunting. detect file system and network anomalies on • Disable any ad blockers and restart
hosts. your browser before class
Getting SIEM data in
Learn how to populate the SIEM app with hosts
and network security events using various beats.
Understand how Elastic Common Schema (ECS)
enables SIEM to work with custom and
third-party data sources in addition to those
supported by Beats.

elastic.co | © 2022 Elasticsearch B.V. All rights reserved.

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy