Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
IBM Security QRadar SIEM Foundations
Navigate and investigate offenses in QRadar SIEM. Learn to analyze network, user, and application activity, and manage security events.
Provider Information
NetCom Learning
1460 Broadway, 8th Floor, Room 8003
New York, NY 10036
Course Overview
System administration knowledge, Basic information security skills, Basic TCP/IP networking skills
8th Floor
Room 8003
New York, NY 10036
- Providers
- Courses
- Course and Provider Quantity
Learning Objectives
Describe the purpose and capabilities of the QRadar SIEM licensed program
Describe how QRadar SIEM collects data and performs vulnerability assessment
How to navigate and customize the dashboard tab
How to investigate the information contained in an offense and respond to an offense
How to find, filter, and group events in order to gain critical insights about the offense
How to create and edit a search that monitors the events of suspicious hosts
How asset profiles are created and updated, and how to use them as part of an offense investigation
How to investigate the flows that contribute to an offense, create and tune false positives, and investigate super flows
How to find custom rules in the QRadar SIEM console, assign actions and responses to the rule, and how to configure rules
How to use charts and apply advanced filters to examine specific activities in your environment
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.