IBM
Направление
- BQ104G — IBM QRadar SIEM Foundations
- Длительность: 3 дня (24 часа)
- Код курса: BQ104G
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 691 500 ₸
Описание курса
Course Description:
IBM QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, asset profiles, and vulnerabilities. QRadar SIEM classifies suspected attacks and policy violations as offenses.
In this 3-day instructor-led course, you learn how to perform the following tasks:
Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy breaches
Search, filter, group, and analyze security data
Investigate the vulnerabilities and services of assets
Use network hierarchies
Locate custom rules and inspect actions and responses of rules
Analyze offenses created by QRadar SIEM
Use index management
Navigate and customize the QRadar SIEM dashboard
Use QRadar SIEM to create customized reports
Use charts and filters
Use AQL for advanced searches
Analyze a real world scenarioExtensive lab exercises are provided to allow students an insight into the routine work of an IT Security Analyst operating the IBM QRadar SIEM platform. The exercises cover the following topics:
Using the QRadar SIEM user interface
Investigating an Offense triggered by events
Investigating the events of an offense
Investigating an offense that is triggered by flows
Using rules
Using the Network Hierarchy
Index and Aggregated Data Management
Using the QRadar SIEM dashboard
Creating QRadar SIEM reports
Using AQL for advanced searches
Analyze a real-world large-scale attackThe lab environment for this course uses the IBM QRadar SIEM 7.3 platform.
Objectives:
After completing this course, you should be able to perform the following tasks:
Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy violations
Search, filter, group, and analyze security data
Investigate events and flows
Investigate asset profiles
Describe the purpose of the network hierarchy
Determine how rules test incoming data and create offenses
Use index and aggregated data management
Navigate and customize dashboards and dashboard items
Create customized reports
Use filters
Use AQL for advanced searches
Analyze a real world scenarioAudience:
This course is designed for security analysts, security technical architects, offense managers, network administrators, and system administrators using QRadar SIEM.
Prerequisites:
Before taking this course, make sure that you have the following skills:
IT infrastructure
IT security fundamentals
Linux
Windows
TCP/IP networking
SyslogTopics:
Unit 1: Introduction to IBM QRadar
Unit 2: IBM QRadar SIEM component architecture and data flows
Unit 3: Using the QRadar SIEM User Interface
Unit 4: Investigating an Offense Triggered by Events
Unit 5: Investigating the Events of an Offense
Unit 6: Using Asset Profiles to Investigate Offenses
Unit 7: Investigating an Offense Triggered by Flows
Unit 8: Using Rules
Unit 9: Using the Network Hierarchy
Unit 10: Index and Aggregated Data Management
Unit 11: Using the QRadar SIEM Dashboard
Unit 12: Creating Reports
Unit 13: Using Filters
Unit 14: Using the Ariel Query Language (AQL) for Advanced Searches
Unit 15: Analyzing a Real-World Large-Scale Attack
Appendix A: A real-world scenario introduction to IBM QRadar SIEM
Appendix B: IBM QRadar architecture - BQ204G — IBM Security QRadar SIEM Advanced Topicsons
- Длительность: 2 дня (16 часов)
- Код курса: BQ204G
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 588 000 ₸
Описание курса
Course Description:
IBM® Security QRadar® enables you to minimize the time gap between when a suspicious activity occurs and when you detect it. Attacks and policy violations leave their footprints in log events and network flows of your IT systems. To connect the dots, QRadar SIEM correlates these scattered events and flows into offenses that alert you to suspicious activities. Using the skills taught in this course, you will be able to configure processing of uncommon events, work with reference data, and develop custom rules, custom actions, and custom anomoly detection rules.
The lab environment for this course uses the IBM QRadar SIEM 7.3 platform.
Objectives:
Create custom log sources to utilize events from uncommon sources
Create, maintain, and use reference data collections
Develop and manage custom rules to detect unusual activity in your network
Develop and manage custom action scripts to for automated rule reponse
Develop and manage anomoly detection rules to detect when unusual network traffic patterns occurAudience:
Security administrators
Security technical architects
Offense managers
Professional services using QRadar SIEM
QRadar SIEM administratorsPrerequisites:
IT infrastructure
IT security fundamentals
Linux
Microsoft Windows
TCP/IP networking
Log files and events
Network flowsYou should also have completed the IBM Security QRadar SIEM Foundations course.
Topics:
Module 1: Creating log source types
Module 2: Leveraging reference data collections
Module 3: Developing custom rules
Module 4: Creating Custom Action Scripts
Module 5: Developing Anomaly Detection Rules
- BQ405GUA — QRadar SOAR: Foundations
- Длительность: 2 дня (16 часов)
- Код курса: BQ405GUA
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 484 500 ₸
Описание курса
Course Description:
In this course, you learn about the IBM Security® QRadar® SOAR architecture, and how to position the product in your company’s security architecture design. You gain hands-on experience with the SOAR interface, by investigating and managing cases and users with the SOAR Breach Response module, playbooks, and email integration.
Objectives
In this course, you learn about the following topics:
QRadar SOAR architectural patterns
Install the product, and configure license and access
Review the SOAR Console
Manage cases
Utilize the concept of artifacts
Utilize case management capabilities
Integrate email system for users and case management
Focus on the Breach Response module
Gain hands-on experience with the SOAR platform
Design playbooks
Integrate IBM and third-party solutions with SOARAudience
Security operations center (SOC) Administrator
SOC Analyst
Security Analyst
Incident Responder
Managed Service Security Provider (MSSP)Topics
Getting started
Describe architectural patterns
Install the product and configure license and access
Review the SOAR Console
Manage cases and use Breach Response add-on
Utilize the concept of artifactsCase management and email integration
Utilize case management capabilities
Integrate email system for users and case management
Focus on the Breach Response modulePlaybooks and integrations
Gain hands-on experience with the SOAR platform
Design playbooks
Integrate IBM and third-party solutions with SOAR - 0G53BUA — IBM SPSS Statistics Essentials (V26)
- Длительность: 2 дня (16 часов)
- Код курса: 0G53BUA
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 502 500 ₸
Описание курса
Course overview
This course guides students through the fundamentals of using IBM SPSS Statistics for typical data analysis. Students will learn the basics of reading data, data definition, data modification, data analysis, and presentation of analytical results. In addition to the fundamentals, students will learn shortcuts that will help them save time. This course uses the IBM SPSS Statistics Base; one section presents an add-on module, IBM SPSS Custom Tables.
Course objectives
Introduction to IBM SPSS Statistics
Reading data and defining metadata
Selecting cases for analyses
Transforming variables
Using functions to transform variables
Setting the unit of analysis
Merging data files
Summarizing individual variables
Describing the relationship between variables
Creating presentation-ready tables with Custom Tables
Customizing pivot tables
Working with syntaxControlling the IBM SPSS Statistics environment
Audience
New users of IBM SPSS Statistics
Users who want to refresh their knowledge about IBM SPSS Statistics
Anyone who is considering purchasing IBM SPSS StatisticsPrerequisites
Knowledge of your business requirements
Course topics
1. Introduction to IBM SPSS Statistics
Review basic concepts in IBM SPSS Statistics
Identify the steps in the research process
Review basic analyses
Use Help2. Reading data and defining metadata
Overview of data sources
Read from text files
Read data from Microsoft Excel
Read data from databases
Define variable properties3. Selecting cases for analyses
Select cases for analyses
Run analyses for groups
Apply report authoring styles4. Transforming variables
Compute variables
Recode values of categorical and scale variables
Create a numeric variable from a string variable5. Using functions to transform variables
Use statistical functions
Use logical functions
Use missing value functions
Use conversion functions
Use system variables
Use the Date and Time Wizard6. Setting the unit of analysis
Remove duplicate cases
Create aggregate datasets
Restructure datasets7. Merging data files
Add cases from one dataset to another
Add variables from one dataset to another
Enrich a dataset with aggregated information8. Summarizing individual variables
Define levels of measurement
Summarizing categorical variables
Summarizing scale variables9. Describing the relationship between variables
Choose the appropriate procedure
Summarize the relationship between categorical variables
Summarize the relationship between a scale and a categorical variable10. Creating presentation-ready tables with Custom Tables
Identify table layouts
Create tables for variables with shared categories
Create tables for multiple response questions11. Customizing pivot tables
Perform Automated Output Modification
Customize pivot tables
Use table templates
Export pivot tables to other applications12. Working with syntax
Use syntax to automate analyses
Create, edit, and run syntax
Shortcuts in the Syntax Editor13. Controlling the IBM SPSS Statistics environment
Set options for output
Set options for variables display
Set options for default working foldersa - 0G51AUA — Statistical Analysis Using IBM SPSS Statistics (V25)
- Длительность: 2 дня (16 часов)
- Код курса: 0G51A
- Стоимость
- Очный формат: По запросу
- Онлайн формат: 502 500 ₸
Описание курса
Course overivew
This course provides an application-oriented introduction to the statistical component of IBM SPSS Statistics. Students will review several statistical techniques and discuss situations in which they would use each technique, how to set up the analysis, as well as how to interpret the results. This includes a broad range of techniques for exploring and summarizing data, as well as investigating and testing relationships. Students will gain an understanding of when and why to use these various techniques as well as how to apply them with confidence, interpret their output, and graphically display the results.
Course objectives
Introduction to statistical analysis
Examine individual variables
Test hypotheses about individual variables
Test the relationship between categorical variables
Test on the difference between two group means
Test on differences between more than two group means
Test the relationship between scale variables
Predict a scale variable: Regression
Introduction to Bayesian statistics
Overview of multivariate proceduresAudience
Anyone who has worked with IBM SPSS Statistics and wants to become better versed in the basic statistical capabilities of IBM SPSS Statistics Base.
Anyone who wants to refresh their knowledge and statistical experience.Prerequisites
Familiarity with basic concepts in statistics, such as measurement levels, mean, and standard deviation.
Familiarity with the windows in IBM SPSS Statistics either by experience with IBM SPSS Statistics (version 18 or later) or completion of the IBM SPSS Statistics Essentials (V25) course.Course topics
1. Introduction to statistical analysis
Identify the steps in the research process
Principles of statistical analysisExamine individual variables
Identify measurement levels
Chart individual variables
Summarize individual variables
Examine the normal distribution
Examine standardized scoresTest hypotheses about individual variables
Identify population parameters and sample statistics
Examine the distribution of the sample mean
Determine the sample size
Test a hypothesis on the population mean
Construct a confidence interval for the population mean
Tests on a single variable: One-Sample T Test, Paired-Samples T Test, and Binomial TestTest the relationship between categorical variables
Chart the relationship between two categorical variables
Describe the relationship: Compare percentages in Crosstabs
Test the relationship: The Chi-Square test in Crosstabs
Assumptions of the Chi-Square test
Pairwise compare column proportions
Measure the strength of the associationTest on the difference between two group means
Compare the Independent-Samples T Test to the Paired-Samples T Test
Chart the relationship between the group variable and scale variable
Describe the relationship: Compare group means
Test on the difference between two group means: Independent-Samples T Test
Assumptions of the Independent-Samples T TestTest on differences between more than two group means
Describe the relationship: Compare group means
Test the hypothesis of equal group means: One-Way ANOVA
Assumptions of One-Way ANOVA
Identify differences between group means: Post-hoc testsTest the relationship between scale variables
Chart the relationship between two scale variables
Describe the relationship: Correlation
Test on the correlation
Assumptions for testing on the correlation
Treatment of missing valuesPredict a scale variable: Regression
What is linear regression?
Explain unstandardized and standardized coefficients
Assess the fit of the model: R Square
Examine residuals
Include 0-1 independent variables
Include categorical independent variablesIntroduction to Bayesian statistics
Bayesian statistics versus classical test theory
Explain the Bayesian approach
Evaluate a null hypothesis: Bayes Factor
Bayesian procedures in IBM SPSS Statistics2. Overview of multivariate procedures
Overview of supervised models
Overview of models to create natural groupings
Направление IBM в HGK: системная подготовка специалистов по корпоративным ИТ-решениям.
Учебный центр Human Growth Kazakhstan (HGK) предлагает комплексную программу обучения по направлениям IBM, охватывающую ключевые области корпоративных ИТ-решений. Курсы ориентированы на подготовку специалистов, способных эффективно работать с продуктами и технологиями IBM в различных сферах, включая управление активами, информационную безопасность и аналитические системы.
Основные направления обучения:
- IBM Maximo Asset Management: изучение возможностей и функций системы управления активами IBM Maximo, включая базовые концепции, настройку и эксплуатацию системы.
- IBM FileNet Content Manager: обучение программированию с использованием Java API для работы с системой управления контентом IBM FileNet, включая разработку приложений и настройку компонентов.
- IBM QRadar SIEM: освоение основ конфигурации, управления событиями и инцидентами, а также методов настройки правил и отчетов в системе информационной безопасности IBM QRadar SIEM.
Преимущества обучения в HGK:
- Авторизованные программы IBM: курсы разработаны в соответствии с официальными стандартами IBM, обеспечивая актуальность и соответствие требованиям индустрии.
- Практическая направленность: обучение включает лабораторные работы и практические задания, позволяя слушателям применять полученные знания в реальных сценариях.
- Гибкие форматы обучения: доступны как очные, так и онлайн-форматы курсов, что позволяет выбрать наиболее удобный способ обучения.
- Подготовка к сертификации: курсы готовят слушателей к сдаче сертификационных экзаменов IBM, подтверждающих профессиональные компетенции в области корпоративных ИТ-решений.
Обучение в HGK по направлениям IBM предоставляет слушателям комплексные знания и навыки, необходимые для успешной работы с современными корпоративными ИТ-решениями. Программы обучения подходят как для начинающих специалистов, так и для опытных инженеров, стремящихся повысить квалификацию и получить признанные в отрасли сертификаты.
Записаться на курс
Контакты
LinkedIn
Email
Web