Threat Hunt with IBM Security QRadar
|
The threat hunter is responsible for investigating malicious activity on the environment and detecting advanced persistent threats (APTs). This course will teach you how to hunt for threats using the IBM Security QRadar SIEM.
The IBM Security QRadar is a complete SIEM solution that helps you to detect threats and investigate cyber-attacks. In this course, Threat Hunt with IBM Security QRadar, you’ll learn how to investigate malicious activity and detect advanced persistent threats (APTs) using the QRadar SIEM solution. First, you’ll explore the overall threat hunt process and the hunting best practices. Next, you’ll discover through our demos how to find indicators of compromise and detect threats using behavior techniques and the QRadar SIEM. Finally, you’ll learn how to improve your detection mechanisms based on the results of your hunting. When you’re finished with this course, you’ll have the skills and knowledge of QRadar needed to threat hunt.
Author Name: Ricardo Reimao
Author Description:
Ricardo is a Cybersecurity Consultant based in Toronto (Canada). He has 14+ years of IT experience, 10 of them in the IT Security field. His main interests are: SIEM solutions (IBM QRadar), Enterprise Security Risk, Penetration Testing, Security processes/procedures and Network Security.
Table of Contents
- Course Overview
1min - The Threat Hunting Process
15mins - Case #1: Intelligence-based Threat Hunting
38mins - Case #2: Behavior-based Threat Hunting
45mins
User Reviews
Be the first to review “Threat Hunt with IBM Security QRadar”
Related Products
Exploitation with Kali Linux
Kali contains an array of tools to assist with security assessments and penetration tests. This course will teach you how to use some of those tools to exploit the systems you find, moving you into a position to perform post exploitation tasks.
Scripting for Security with Bash
Bash is the GNU Project’s shell for command execution, scripting, and automation. This course will teach you how to use Bash and Linux commands for security management.
Post Exploitation with Meterpreter
In a penetration test, escalating your privileges and exfiltrating data are some of the most important tasks of the assessment. This course will teach you how to use the Meterpreter tool for post-exploitation tasks.
Metasploit: Getting Started
Penetration testing is an exciting way to blend an attacker mindset with the tools needed to identify security problems. This course will teach you the basics of the Metasploit Framework to test and exploit vulnerable systems.
Application Analysis with Snyk
Developer-centric security is the need of the hour. In this course, you will learn how to automatically detect and fix vulnerabilities in your code, open source dependencies, containers, and infrastructure-as-code with Snyk.
Ghidra Concepts and Basic Functionality
At the core of every reverse engineers toolkit is a tool that disassembles or decompiles machine code. This course will teach you everything you need to know to get started with Ghidra, a free and open source suite of reverse engineering tools.
There are no reviews yet.