Security information and event management (SIEM) is a term for software products and services combining security information management (SIM) and security event management (SEM). SIEM technology provides real-time analysis of security alerts generated by network hardware and applications. SIEM is sold as software, appliances or managed services, and are also used to log security data and generate reports for compliance purposes.

• Training by Realtime Expert trainer
• Live Online Classes
• Free study material
• Online virtual Classes available in morning, evening and weekend

Prerequisties

• Basic Networking Knowledge.

Duration

Online

• The format is 40% theory, 60% Hands-on.
• It is a 20 days program and extends up to 2hrs each.

Corporate

• The format is 40% theory, 60% Hands-on.
• It is a 5 days program and extends up to 8hrs each.

Classroom

• Private Classroom arrenged on request and minimum attendies for batch is 4.

Course Content

• Introduction to SIEM
• Network Threats
• SIEM Architecture
• SIEM Deployment
• Logs and Events
• Event Collection and Event Correlation
• Correlation Rules
• Forensically Ready Data
• Intrusion Detection, Prevention and Tolerance
• Properties of a Robust SIEM
• Installing Alien Vault SIEM
• Using Web Interface
• Configuring Sensor, Logger and Server
• Configuring Network Inventory
• Configuring Vulnerability Scanning
• Configuring Signature Updates
• Policy Management
• Configuring Tickets
• Introduction to SPLUNK
• Overview of machine data
• How Splunk works with machine data
• Introduction to Splunk's user interface
• Searching and saving results
• Creating reports and visualizations