IBM
Направление
- BQ105G — IBM QRadar SIEM Foundations
- Длительность: 3 дня (24 часа)
- Код курса: BQ105G
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 783 000 ₸
Описание курса
Course Description
IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned.
Objectives
After completing this course, you should be able to perform the following tasks:
Describe how QRadar collects data to detect suspicious activities
Describe the QRadar architecture and data flows
Navigate the user interface
Define log sources, protocols, and event details
Discover how QRadar collects and analyzes network flow information
Describe the QRadar Custom Rule Engine
Utilize the Use Case Manager app
Discover and manage asset information
Learn about a variety of QRadar apps, content extensions, and the App Framework
Analyze offenses by using the QRadar UI and the Analyst Workflow app
Search, filter, group, and analyze security data
Use AQL for advanced searches
Use QRadar to create customized reports
Explore aggregated data management
Define sophisticated reporting using Pulse Dashboards
Discover QRadar administrative tasksAudience
This course is designed for security analysts, security technical architects, offense managers, network administrators, and system administrators using QRadar SIEM.
Prerequisites
Before taking this course, make sure that you have the following skills:
IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
SyslogTopics
Unit 0: IBM Security QRadar 7.5 — Fundamentals
Unit 1: QRadar Architecture
Unit 2: QRadar UI — Overview
Unit 3: QRadar — Log Source
Unit 4: QRadar flows and QRadar Network Insights
Unit 5: QRadar Custom Rule Engine (CRE)
Unit 6: QRadar Use Case Manager app
Unit 7: QRadar — Assets
Unit 8: QRadar extensions
Unit 9: Working with Offenses
Unit 10: QRadar — Search, filtering, and AQL
Unit 11: QRadar — Reporting and Dashboards
Unit 12: QRadar — Admin ConsoleIn this 3-day instructor-led course, you learn how to perform the following tasks:
Describe how QRadar collects data to detect suspicious activities
Describe the QRadar architecture and data flows
Navigate the user interface
Define log sources, protocols, and event details
Discover how QRadar collects and analyzes network flow information
Describe the QRadar Custom Rule Engine
Utilize the Use Case Manager app
Discover and manage asset information
Learn about a variety of QRadar apps, content extensions, and the App Framework
Analyze offenses by using the QRadar UI and the Analyst Workflow app
Search, filter, group, and analyze security data
Use AQL for advanced searches
Use QRadar to create customized reports
Explore aggregated data management
Define sophisticated reporting using Pulse Dashboards
Discover QRadar administrative tasksExtensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics:
Architecture exercises
UI Overview exercises
Log Sources exercises
Flows and QRadar Network Insights exercises
Custom Rule Engine (CRE) exercises
Use Case Manager app exercises
Assets exercises
App Framework exercises
Working with Offenses exercises.
Search, filtering, and AQL exercises
Reporting and Dashboards exercises
QRadar Admin tasks exercises - BQ205G — IBM QRadar SIEM Advanced Topics
- Длительность: 2 дня (16 часов)
- Код курса: BQ205G
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 673 000 ₸
Описание курса
QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses.
This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned.
The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.
Objectives
Learn how to create custom log sources
Discover how to work with reference data collections and custom rules
Use X-Force data and Threat Intelligence app
Use the Use Case Manager app
Learn how to use UBA and QRadar Advisor
Discover Tuning
Explore Custom action scriptsDiscuss Integration with IBM SOAR
Audience
This course is designed for security administrators and security analysts.
Prerequisites
Students should be knowledgeable about the following topics:
IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
Syslog
Foundational skills for the IBM QRadar Security Intelligence Platform (at least the skills that are taught in the IBM QRadar SIEM Foundations — BQ105 course)Topics
Unit 1: Custom log sources
Unit 2: Reference data collections and custom rules
Unit 3: IBM X-Force Threat Intelligence in QRadar
Unit 4: User Behavior Analytics and Advisor with Watson
Unit 5: Tuning
Unit 6: Custom action scripts
Unit 7: IBM SOAR integration - BQ405GUA — QRadar SOAR: Foundations
- Длительность: 2 дня (16 часов)
- Код курса: BQ405GUA
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 512 000 ₸
Описание курса
Course Description:
In this course, you learn about the IBM Security® QRadar® SOAR architecture, and how to position the product in your company’s security architecture design. You gain hands-on experience with the SOAR interface, by investigating and managing cases and users with the SOAR Breach Response module, playbooks, and email integration.
Objectives
In this course, you learn about the following topics:
QRadar SOAR architectural patterns
Install the product, and configure license and access
Review the SOAR Console
Manage cases
Utilize the concept of artifacts
Utilize case management capabilities
Integrate email system for users and case management
Focus on the Breach Response module
Gain hands-on experience with the SOAR platform
Design playbooks
Integrate IBM and third-party solutions with SOARAudience
Security operations center (SOC) Administrator
SOC Analyst
Security Analyst
Incident Responder
Managed Service Security Provider (MSSP)Topics
Getting started
Describe architectural patterns
Install the product and configure license and access
Review the SOAR Console
Manage cases and use Breach Response add-on
Utilize the concept of artifactsCase management and email integration
Utilize case management capabilities
Integrate email system for users and case management
Focus on the Breach Response modulePlaybooks and integrations
Gain hands-on experience with the SOAR platform
Design playbooks
Integrate IBM and third-party solutions with SOAR - 0G53BUA — IBM SPSS Statistics Essentials (V26)
- Длительность: 2 дня (16 часов)
- Код курса: 0G53BUA
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 530 500 ₸
Описание курса
Course overview
This course guides students through the fundamentals of using IBM SPSS Statistics for typical data analysis. Students will learn the basics of reading data, data definition, data modification, data analysis, and presentation of analytical results. In addition to the fundamentals, students will learn shortcuts that will help them save time. This course uses the IBM SPSS Statistics Base; one section presents an add-on module, IBM SPSS Custom Tables.
Course objectives
Introduction to IBM SPSS Statistics
Reading data and defining metadata
Selecting cases for analyses
Transforming variables
Using functions to transform variables
Setting the unit of analysis
Merging data files
Summarizing individual variables
Describing the relationship between variables
Creating presentation-ready tables with Custom Tables
Customizing pivot tables
Working with syntaxControlling the IBM SPSS Statistics environment
Audience
New users of IBM SPSS Statistics
Users who want to refresh their knowledge about IBM SPSS Statistics
Anyone who is considering purchasing IBM SPSS StatisticsPrerequisites
Knowledge of your business requirements
Course topics
1. Introduction to IBM SPSS Statistics
Review basic concepts in IBM SPSS Statistics
Identify the steps in the research process
Review basic analyses
Use Help2. Reading data and defining metadata
Overview of data sources
Read from text files
Read data from Microsoft Excel
Read data from databases
Define variable properties3. Selecting cases for analyses
Select cases for analyses
Run analyses for groups
Apply report authoring styles4. Transforming variables
Compute variables
Recode values of categorical and scale variables
Create a numeric variable from a string variable5. Using functions to transform variables
Use statistical functions
Use logical functions
Use missing value functions
Use conversion functions
Use system variables
Use the Date and Time Wizard6. Setting the unit of analysis
Remove duplicate cases
Create aggregate datasets
Restructure datasets7. Merging data files
Add cases from one dataset to another
Add variables from one dataset to another
Enrich a dataset with aggregated information8. Summarizing individual variables
Define levels of measurement
Summarizing categorical variables
Summarizing scale variables9. Describing the relationship between variables
Choose the appropriate procedure
Summarize the relationship between categorical variables
Summarize the relationship between a scale and a categorical variable10. Creating presentation-ready tables with Custom Tables
Identify table layouts
Create tables for variables with shared categories
Create tables for multiple response questions11. Customizing pivot tables
Perform Automated Output Modification
Customize pivot tables
Use table templates
Export pivot tables to other applications12. Working with syntax
Use syntax to automate analyses
Create, edit, and run syntax
Shortcuts in the Syntax Editor13. Controlling the IBM SPSS Statistics environment
Set options for output
Set options for variables display
Set options for default working foldersa - 0G51AUA — Statistical Analysis Using IBM SPSS Statistics (V25)
- Длительность: 2 дня (16 часов)
- Код курса: 0G51A
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 530 500 ₸
Описание курса
Course overivew
This course provides an application-oriented introduction to the statistical component of IBM SPSS Statistics. Students will review several statistical techniques and discuss situations in which they would use each technique, how to set up the analysis, as well as how to interpret the results. This includes a broad range of techniques for exploring and summarizing data, as well as investigating and testing relationships. Students will gain an understanding of when and why to use these various techniques as well as how to apply them with confidence, interpret their output, and graphically display the results.
Course objectives
Introduction to statistical analysis
Examine individual variables
Test hypotheses about individual variables
Test the relationship between categorical variables
Test on the difference between two group means
Test on differences between more than two group means
Test the relationship between scale variables
Predict a scale variable: Regression
Introduction to Bayesian statistics
Overview of multivariate proceduresAudience
Anyone who has worked with IBM SPSS Statistics and wants to become better versed in the basic statistical capabilities of IBM SPSS Statistics Base.
Anyone who wants to refresh their knowledge and statistical experience.Prerequisites
Familiarity with basic concepts in statistics, such as measurement levels, mean, and standard deviation.
Familiarity with the windows in IBM SPSS Statistics either by experience with IBM SPSS Statistics (version 18 or later) or completion of the IBM SPSS Statistics Essentials (V25) course.Course topics
1. Introduction to statistical analysis
Identify the steps in the research process
Principles of statistical analysisExamine individual variables
Identify measurement levels
Chart individual variables
Summarize individual variables
Examine the normal distribution
Examine standardized scoresTest hypotheses about individual variables
Identify population parameters and sample statistics
Examine the distribution of the sample mean
Determine the sample size
Test a hypothesis on the population mean
Construct a confidence interval for the population mean
Tests on a single variable: One-Sample T Test, Paired-Samples T Test, and Binomial TestTest the relationship between categorical variables
Chart the relationship between two categorical variables
Describe the relationship: Compare percentages in Crosstabs
Test the relationship: The Chi-Square test in Crosstabs
Assumptions of the Chi-Square test
Pairwise compare column proportions
Measure the strength of the associationTest on the difference between two group means
Compare the Independent-Samples T Test to the Paired-Samples T Test
Chart the relationship between the group variable and scale variable
Describe the relationship: Compare group means
Test on the difference between two group means: Independent-Samples T Test
Assumptions of the Independent-Samples T TestTest on differences between more than two group means
Describe the relationship: Compare group means
Test the hypothesis of equal group means: One-Way ANOVA
Assumptions of One-Way ANOVA
Identify differences between group means: Post-hoc testsTest the relationship between scale variables
Chart the relationship between two scale variables
Describe the relationship: Correlation
Test on the correlation
Assumptions for testing on the correlation
Treatment of missing valuesPredict a scale variable: Regression
What is linear regression?
Explain unstandardized and standardized coefficients
Assess the fit of the model: R Square
Examine residuals
Include 0-1 independent variables
Include categorical independent variablesIntroduction to Bayesian statistics
Bayesian statistics versus classical test theory
Explain the Bayesian approach
Evaluate a null hypothesis: Bayes Factor
Bayesian procedures in IBM SPSS Statistics2. Overview of multivariate procedures
Overview of supervised models
Overview of models to create natural groupings
Направление IBM в HGK: системная подготовка специалистов по корпоративным ИТ-решениям.
Учебный центр Human Growth Kazakhstan (HGK) предлагает комплексную программу обучения по направлениям IBM, охватывающую ключевые области корпоративных ИТ-решений. Курсы ориентированы на подготовку специалистов, способных эффективно работать с продуктами и технологиями IBM в различных сферах, включая управление активами, информационную безопасность и аналитические системы.
Основные направления обучения:
- IBM Maximo Asset Management: изучение возможностей и функций системы управления активами IBM Maximo, включая базовые концепции, настройку и эксплуатацию системы.
- IBM FileNet Content Manager: обучение программированию с использованием Java API для работы с системой управления контентом IBM FileNet, включая разработку приложений и настройку компонентов.
- IBM QRadar SIEM: освоение основ конфигурации, управления событиями и инцидентами, а также методов настройки правил и отчетов в системе информационной безопасности IBM QRadar SIEM.
Преимущества обучения в HGK:
- Авторизованные программы IBM: курсы разработаны в соответствии с официальными стандартами IBM, обеспечивая актуальность и соответствие требованиям индустрии.
- Практическая направленность: обучение включает лабораторные работы и практические задания, позволяя слушателям применять полученные знания в реальных сценариях.
- Гибкие форматы обучения: доступны как очные, так и онлайн-форматы курсов, что позволяет выбрать наиболее удобный способ обучения.
- Подготовка к сертификации: курсы готовят слушателей к сдаче сертификационных экзаменов IBM, подтверждающих профессиональные компетенции в области корпоративных ИТ-решений.
Обучение в HGK по направлениям IBM предоставляет слушателям комплексные знания и навыки, необходимые для успешной работы с современными корпоративными ИТ-решениями. Программы обучения подходят как для начинающих специалистов, так и для опытных инженеров, стремящихся повысить квалификацию и получить признанные в отрасли сертификаты.
Записаться на курс
Контакты
LinkedIn
Email
Web