Courses
IBM QRadar SIEM Advanced Topics
25 July 2024 | Written by: Brian White
Categorized: Courses
Share this post:
Course update: IBM QRadar SIEM Advanced Topics
QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses.
This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned.
What you learn:
- Create custom log sources
- Work with reference data collections and custom rules
- Use X-Force data and Threat Intelligence app
- Use the Use Case Manager app
- Use User Behavior Analytics (UBA) and QRadar Advisor
- Discover and perform tuning
- Explore custom action scripts
- Integrate QRadar with IBM SOAR
Skills you gain:
- Threat investigation
- QRadar data searching
- QRadar X-Force integration
- QRadar incident response
The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.
The Instructor-led version of this course (BQ205G) has a duration of 16 hours and includes extensive lab exercises. This course replaces course BQ204G.
The Self-paced version of this course (BQ205XG) has a duration of 16 hours. Access is allowed for 12 months with 31 days of lab access. This course replaces BQ204XG.
Announcing a new instructor-led course on IBM Instana
IBM Instana helps in managing application performance in real-time, maximizing uptime with automated full-stack observability. Learn about the foundational concepts and value of enterprise observability platform, in the new course – IBM Instana Foundations (TN205G). In this instructor-led course, through a series of lectures and hands-on lab activities, you will learn how to navigate the user […]
New Course: Guardium Data Protection: Monitoring Data End to End
IBM Learning is pleased to announce a significant refresh of the Guardium Data Protection: Monitoring Data End to End Self-Paced Virtual Course (SPVC) for clients. This course covers designing policy, configuring policy, reporting, and configuring alerts on Guardium 12.0. Course details can be found on the IBM Training website here: https://www.ibm.com/training/course/8G901XG
Elevate Your Data Management Skills with New IBM Storage Scale Courses
In the rapidly evolving world of information technology, staying ahead with the latest knowledge and skills is not just an advantage, it’s a necessity. IBM recognizes this need and is devoted to providing comprehensive learning solutions that cater to the diverse requirements of professionals worldwide. In this spirit, we’re thrilled to announce the release of […]