-
This course provides you with the knowledge required to use advanced ArcSight ESM content to find and correlate event information, perform actions such as notifying stakeholders, graphically analyze event data, and report on security incidents. You will familiarize and/or reinforce your understanding of the advanced correlation capabilities within ArcSight ESM that provide a significant edge in detecting active attacks.
This course covers ArcSight security problem solving methodology using advanced ESM content to find, track, and re-mediate security incidents. During the training, you will use variables and correlation activities, customize report templates for dynamic content, and customize dashboards to monitor incidents.
The last day of class offers a hands-on exam. Passing the exam awards you with Certified Expert badge. -
Course Contents
-
- Module 1: ESM Overview
- Module 2: Command Center
- Module 3: ArcSight Console
- Module 4: Active Channels
- Module 5: Filters
- Module 6: Variable Customization
- Module 7: Data Monitors and Dashboards
- Module 8: ESM Lists
- Module 9: ESM Rules
- Module 10: Query Viewers Authoring
- Module 11: ESM Reports
- Module 12: Unifited Event Search Tools
You will receive the original course documentation by HPE in English language as an HPE e-kit.
-
Target Group
-
This course is intended for analysts responsible for:
- Defining their organization's security objectives
- Building or using advanced content to correlate, view and respond to those security objectives.
-
Knowledge Prerequisites
-
To be successful in this course, you should have the following prerequisites or knowledge:
- Common security devices, such as IDS and firewalls
- Common network device functions, such as routers, switches, and hubs
- TCP/IP functions such as CIDR blocks, subnets, addressing, and communications
- Basic Windows operating system tasks and functions
- Possible attack activities, such as scans, man in the middle, sniffing, DoS, and possible abnormal activities, such as worms, Trojans, and viruses 3
- SIEM terminology, such as threat, vulnerability, risk, asset, exposure, and safeguards
- Completed the ArcSight ESM Administrator and Analyst course or 6 months experience administering ArcSight ESM
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
You can find the complete description of this course with dates and prices ready for download at as PDF.-
This course provides you with the knowledge required to use advanced ArcSight ESM content to find and correlate event information, perform actions such as notifying stakeholders, graphically analyze event data, and report on security incidents. You will familiarize and/or reinforce your understanding of the advanced correlation capabilities within ArcSight ESM that provide a significant edge in detecting active attacks.
This course covers ArcSight security problem solving methodology using advanced ESM content to find, track, and re-mediate security incidents. During the training, you will use variables and correlation activities, customize report templates for dynamic content, and customize dashboards to monitor incidents.
The last day of class offers a hands-on exam. Passing the exam awards you with Certified Expert badge. -
Course Contents
-
- Module 1: ESM Overview
- Module 2: Command Center
- Module 3: ArcSight Console
- Module 4: Active Channels
- Module 5: Filters
- Module 6: Variable Customization
- Module 7: Data Monitors and Dashboards
- Module 8: ESM Lists
- Module 9: ESM Rules
- Module 10: Query Viewers Authoring
- Module 11: ESM Reports
- Module 12: Unifited Event Search Tools
You will receive the original course documentation by HPE in English language as an HPE e-kit.
-
Target Group
-
This course is intended for analysts responsible for:
- Defining their organization's security objectives
- Building or using advanced content to correlate, view and respond to those security objectives.
-
Knowledge Prerequisites
-
To be successful in this course, you should have the following prerequisites or knowledge:
- Common security devices, such as IDS and firewalls
- Common network device functions, such as routers, switches, and hubs
- TCP/IP functions such as CIDR blocks, subnets, addressing, and communications
- Basic Windows operating system tasks and functions
- Possible attack activities, such as scans, man in the middle, sniffing, DoS, and possible abnormal activities, such as worms, Trojans, and viruses 3
- SIEM terminology, such as threat, vulnerability, risk, asset, exposure, and safeguards
- Completed the ArcSight ESM Administrator and Analyst course or 6 months experience administering ArcSight ESM
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
You can find the complete description of this course with dates and prices ready for download at as PDF.