IBM

Course Description

This basic hands-on 5-day workshop focuses on creating association and temporal charts using i2 Analyst’s Notebook from data within i2 iBase.

Emphasis is placed on learning the user side of iBase and how it works with Analyst’s Notebook as one complementary suite. A combination of lecture, hands-on work and exercises teaches the functionality of iBase and the basic functions of i2 Analyst’s Notebook necessary for working with both of these tools to maximize analytical results and impact.

This workshop does not teach how to import files into Analyst’s Notebook. It does teach basic importing into the iBase database.

Objectives

Acquire the knowledge and skills necessary to use i2 Analyst’s Notebook and i2 iBase together as a seamless, synergistic unit to power more effective and timely analysis while sharing that information within an organization
The ability to populate an iBase database both manually and via the import feature
The ability to query an i2 iBase database and use its other analysis functions to produce actionable leads
The ability to visualize data from i2 iBase in i2 Analyst’s Notebook to produce charts for association and temporal analysis as well as for presentation
The ability to use the analysis features unique to i2 Analyst’s Notebook such as list items, visual search and social network analysis on data sent to it from an i2 iBase database

Audience

This basic course is for:

Analysts or Database Designers/Administrators whose organization is implementing an i2 Analyst’s Workstation or i2 iBase solution
Analysts or Database Designers/Administrators newly joining an organization that has implemented an i2 Analyst’s Workstation or i2 iBase solution
If you have already taken i2 Analyst’s Notebook Level 1, you should take i2 iBase User rather than Charting with i2 iBase Databases.

Prerequisites

You should have:

Familiarity with using WindowsÂ
Basic understanding of analysis techniques

Course Description
This course is also available as self-paced virtual (e-learning) course, IBM Integration Bus V9 Application Development I (ZM665G). This option does not require any travel.

An updated version of this course is available. For more information, click IBM Integration Bus V10 Application Development I (WM666G).

In this course, you learn how to use IBM Integration Bus to develop, deploy, and support platform-independent message flow applications. These applications use various messaging topologies to transport messages between service requesters and service providers, and also allow the messages to be routed, transformed, and enriched during processing.

The course explores message flow problem determination, with an emphasis on identifying and recovering from errors in message flows. You learn how to construct message flows that use extended Structured Query Language (ESQL), Java, and the IBM Graphical Data Mapping editor to transform messages. The course also explores how to control the flow of messages by using various message processing nodes, and how to use databases and maps to transform and enrich messages during processing. You review various messaging transports at a high level and gain a basic understanding of how message flows can use web services, Java Message Service (JMS), and other transport mechanisms. Finally, you explore how to extend IBM Integration Bus by using adapters and other IBM products.

Throughout the course, hands-on lab exercises allow you to practice the skills and concepts that are presented in the lectures. The hands-on labs cover topics such as creating and testing message flows, message modeling, problem determination, and error handling.

Objectives
Describe the features and uses of the IBM Integration Bus
Develop, deploy, and test message flows
Generate message flows from predefined patterns
Use IBM Integration Bus problem determination aids to diagnose and solve development and runtime errors
Describe the function and appropriate use of various message processing nodes
Write basic ESQL and Java methods to transform messages
Use the IBM Graphical Data Mapping editor to transform messages
Define, use, and test simple XML and Data Format Description Language (DFDL) message models
Describe supported transport protocols and how to call them in message flows
Describe IBM Integration Bus integration with other IBM products such as IBM Business Process Manager, WebSphere Enterprise Service Bus, WebSphere DataPower, and WebSphere Transformation Extender
Extend IBM Integration Bus functions by using WebSphere Adapters and plug-ins
Describe the packaged application support for SAP, Siebel, and PeopleSoft

Audience
This course is designed for experienced integration specialists and senior-level developers with experience in application development and WebSphere MQ.

Prerequisites
You should have:

Basic experience with WebSphere MQ administration
A basic understanding of current IT technologies such as Structured Query Language (SQL), Extensible Markup Language (XML), Java, and XML Path language (XPath)
An understanding of the business needs of your organization

Overview
Provide focused training for experienced UNIX administrators on how to install, customize, and administer the AIX operating system in a multiuser POWER (System p) partitioned environment. The course is based on AIX 7.1 running on a Power system managed by Hardware Management Console version 7 and provides practical discussions that are appropriate to earlier AIX releases.
Learning Journeys or Training Paths that reference this course:
Cloud Foundation: Power
AIX Users and System Administration
Cloud Foundation: Power

Audience
This intermediate course is intended for experienced UNIX system administrators who need training to support their transition to supporting AIX running on POWER processor based systems in a multiuser POWER (System p) partitioned environment.

Prerequisites
You should be able to use basic UNIX commands to:
Execute basic AIX commands
Manage files and directories
Use the vi editor
Use redirection, pipes, and tees
Use the utilities find and grep
Use command and variable substitution
Set and change Korn shell variables
Write simple shell scripts
The above skills can be acquired by attending AIX Basics (AU130) or (AN100) or through equivalent AIX/UNIX knowledge.

In addition, you are expected to have hands-on experience administering a UNIX operating system (such as Solaris, HP/UX, and others) including:

User management and system security
Storage
Networking
System shutdown and restart
Backup and recovery
System task scheduling

Objectives
Install the AIX operating system, filesets, and RedHat Package Manager (RPM) packages
Perform system startup and shutdown
Discuss and use system management tools such as System Management Interface Tool (SMIT) and IBM Systems Director console for AIX
Manage physical and logical devices
Discuss the purpose of the logical volume manager
Perform logical volume and file system management
Perform and restore system backups
Use the AIX error log as a tool in problem determination
Configure Transmission Control Protocol/Internet Protocol (TCP/IP) networking

Course Description:
IBM QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, asset profiles, and vulnerabilities. QRadar SIEM classifies suspected attacks and policy violations as offenses.

In this 3-day instructor-led course, you learn how to perform the following tasks:

Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy breaches
Search, filter, group, and analyze security data
Investigate the vulnerabilities and services of assets
Use network hierarchies
Locate custom rules and inspect actions and responses of rules
Analyze offenses created by QRadar SIEM
Use index management
Navigate and customize the QRadar SIEM dashboard
Use QRadar SIEM to create customized reports
Use charts and filters
Use AQL for advanced searches
Analyze a real world scenario

Extensive lab exercises are provided to allow students an insight into the routine work of an IT Security Analyst operating the IBM QRadar SIEM platform. The exercises cover the following topics:

Using the QRadar SIEM user interface
Investigating an Offense triggered by events
Investigating the events of an offense
Investigating an offense that is triggered by flows
Using rules
Using the Network Hierarchy
Index and Aggregated Data Management
Using the QRadar SIEM dashboard
Creating QRadar SIEM reports
Using AQL for advanced searches
Analyze a real-world large-scale attack

The lab environment for this course uses the IBM QRadar SIEM 7.3 platform.

Objectives:
After completing this course, you should be able to perform the following tasks:

Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy violations
Search, filter, group, and analyze security data
Investigate events and flows
Investigate asset profiles
Describe the purpose of the network hierarchy
Determine how rules test incoming data and create offenses
Use index and aggregated data management
Navigate and customize dashboards and dashboard items
Create customized reports
Use filters
Use AQL for advanced searches
Analyze a real world scenario

Audience:
This course is designed for security analysts, security technical architects, offense managers, network administrators, and system administrators using QRadar SIEM.

Prerequisites:
Before taking this course, make sure that you have the following skills:

IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
Syslog

Course Description:
IBM® Security QRadar® enables you to minimize the time gap between when a suspicious activity occurs and when you detect it. Attacks and policy violations leave their footprints in log events and network flows of your IT systems. To connect the dots, QRadar SIEM correlates these scattered events and flows into offenses that alert you to suspicious activities. Using the skills taught in this course, you will be able to configure processing of uncommon events, work with reference data, and develop custom rules, custom actions, and custom anomoly detection rules.

The lab environment for this course uses the IBM QRadar SIEM 7.3 platform.

Objectives:
Create custom log sources to utilize events from uncommon sources
Create, maintain, and use reference data collections
Develop and manage custom rules to detect unusual activity in your network
Develop and manage custom action scripts to for automated rule reponse
Develop and manage anomoly detection rules to detect when unusual network traffic patterns occur

Audience:
Security administrators
Security technical architects
Offense managers
Professional services using QRadar SIEM
QRadar SIEM administrators

Prerequisites:
IT infrastructure
IT security fundamentals
Linux
Microsoft Windows
TCP/IP networking
Log files and events
Network flows

You should also have completed the IBM Security QRadar SIEM Foundations course.