آموزش Arc Sight
- توضیحات
- تاریخ ایجاد در چهارشنبه, 23 ارديبهشت 1394 14:49
اهداف دوره: ايجاد قابليت کار با ابزار ArcSight ESM برترين SIEM در طی 10 سال گذشته و آشنايی با معماری اين سيستم .
شرايط شركت كنندگان: کارشناسان و مديران درگير در حوزه امنيت شبکه و مرکز عمليات امنيت SOC
محتوا آموزشي دوره :
روز اول:
Module 1 – ArcSight ESM: Overview
Describe ArcSight ESM Roles
Describe ArcSight ESM Components
Explain ArcSight ESM Resources
Describe SSL Communications
Module 2 - ArcSight Event Schema
Explain the Event Schema
Outline Schema Definitions
Module 3 – Event Lifecycle
Event Lifecycle
روز دوم:
Module 4 - Using ESM Console
Provide a Console Overview
Using the Navigator Panel
Using the Viewer/Grid Panel
Using the Inspect/Edit Panel
Module 5 - Using Active Channels
Active Channel Components
Field Sets
Creating Active Channel
Creating Field Sets
Using the Console Help
روز سوم:
Module 6 - Using Filters
Explain Filters
Using Filters in an Active Channel
Debugging Active Channel Filters
Module 7 - Using Variables
Explain Local and Global Variables
Using Variables with ESM Resources
Promoting Local Variables to Global Variables
Sharing Global Variables Among Multiple Resources
Module 8 - Using Dashboards and Data Monitors
Explain Dashboards
Using Data Monitors
Creating Dashboards
Using Custom View Dashboards
روز چهارم:
Module 9 - ESM Rules
Explain Rules
Describe Rule Actions and Triggers
Describe Active Lists
Describe Session Lists
Module 10 - ESM Reports
Explain Reports
How to Run Reports
Building Basic Reports
Building Complex Reports
روز پنجم:
Module 11 - Query Viewers
Explain Query Viewers
How Dashboards and Reports Interact with Query Viewers
Module 12 - ESM Network Model
Explain the ArcSight Network Model
Explain Asset Modeling
Using the Network Model Wizard
Module 13 - ESM Workflow
Describe workflow and functions of
workflow resources
Understand the sequence of events in a workflow
Case Creation
Event Annotation
Module 14 - ArcSight ESM Web
Home Display
View Existing Dashboards
View Existing Reports
View Existing Active Channels