Cursos de Cybersecurity

In this course, you learn about the IBM Security® Verify Access architecture and deployment options and how to position the product within your organization’s landscape of security solutions. You gain skills around how to deploy Verify Access in a containerized environment or on a virtual machine. First, you improve your Verify Access administration skills by managing users, groups, and domains. Then, you set up the WebSEAL reverse proxy, including the configuration of authentication and authorization processes, protecting the object space with junctions. You also learn about other administration tasks.

Learn how to detect insider threats triggered by anomalous or malicious user behavior. Get ready to install, configure, and tune IBM Security® QRadar UBA and the Machine Learning app. Improve your skill to investigate user behavior with UBA and expand your threat detection capabilities across your network with the QRadar® Advisor with Watson™ app.

In this course, you learn about the IBM Security® QRadar® EDR architecture and how to position the product within your company’s landscape of security solutions. You gain skills around how to install the QRadar EDR Hive on your premises and the EDR Agents on your endpoints. You can review the user interface and how to navigate the EDR Dashboard while investigating endpoint threats.This course applies to version 3.12 of the on-premises QRadar EDR offering.

Gain hands-on experience with the IBM Security® QRadar® SOAR platform. Learn how to integrate with Active Directory by using the LDAP and Active Directory Function for SOAR app integration. Explore the actions which can be performed from the SOAR platform to respond to cases which users are involved.This course is designed and built on a QRadar SOAR stand-alone virtual machine (v50.1.54) with a complementary SOAR App Host (v1.14.1). However, the concepts that the course covers apply to all on-premises or SaaS versions of QRadar SOAR.

In this couse, you learn about the IBM Security® QRadar® SIEM and QRadar SOAR apps that automate data exchange and improve the security incident investigation. You gain knowledge on how to integrate QRadar SOAR and SIEM. You improve incident response by using the SOAR Plug-in App on SIEM and analyzing SIEM's offense in SOAR's QRadar Offense Details tab. You build a playbook and run a query by configuring the QRadar Integration app in a set of useful functions. 

In this course, you learn about the IBM Security® QRadar® SOAR architecture, and how to position the product in your company’s security architecture design. You gain hands-on experience with the SOAR interface, by investigating and managing cases and users with the SOAR Breach Response module, playbooks, and email integration.

QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned. The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned. In this 3-day instructor-led course, you learn how to perform the following tasks:Describe how QRadar collects data to detect suspicious activities​​​​​​​Describe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasksExtensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics:Architecture exercisesUI Overview exercisesLog Sources exercisesFlows and QRadar Network Insights exercisesCustom Rule Engine (CRE) exercisesUse Case Manager app exercisesAssets exercisesApp Framework exercisesWorking with Offenses exercises.Search, filtering, and AQL exercisesReporting and Dashboards exercisesQRadar Admin tasks exercisesThe lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

Students perform AIX management tasks like scheduling jobs, system backups, starting up and shutting down the system, installing AIX, software maintenance tasks, and TCP/IP configuration. This course is the second of a sequence of two courses covering basic AIX management tasks.

This course enables students to perform certain basic management tasks on the AIX operating system. This includes managing devices, LVM, file systems, and user accounts. This course is the first of a sequence of two courses covering basic AIX management tasks. 

In this four-day course, you learn about installation, configuration and administration of IBM Storage Protect Plus v10.1.8. This begins with a review of the software features and functions, and the basic requirements, including architecture and data movement, and upgrade of the various components. Then, through lecture and hands-on labs, you learn how to deploy an environment as a virtual appliance or as a set of containers. You add providers and create customized SLA policies with options. You associate providers with policy to protect data in file systems and virtual machines, a variety of applications and databases, and Kubernetes and OpenShift containers. You configure and manage user access to the system and to the providers you protect. You manage jobs, plan and prepare for disaster recovery, view log files for monitoring and troubleshooting, and create custom reports.

In this three-day course, you learn how to install, configure and administer IBM Storage Protect Plus v10.1.6. You begin with a review of the software capabilities, requirements, and architecture. Then, through lecture and hands-on labs, you learn how to perform the various tasks required to configure the environment on an installed virtual appliance. You customize SLA policies and make use of available options to protect virtual machines and applications, as well as the IBM Storage Protect Plus catalog. You monitor and manage jobs, plan and prepare for disaster recovery, view log files, and create custom reports.

IBM Storage Protect is an enterprise data protection solution designed to help you streamline your data protection processing, reduce the cost of storage, and provide the flexibility and security to meet any service level agreement. IBM Storage Protect optimizes storage utilization by using incremental forever as well as block-level backup and replication, policy-based data management, and an intuitive interface, the Operations Center. In this course, you learn how the use of two or more Storage Protect servers provides more options for data movement in the environment, like replication to multiple targets. You also use IBM Cloud Object Storage to create a storage pool for backups and long-term retention. The bulk of the administrative tasks are performed using the Operations Center and Command Builder which provides a command line interface for all servers configured in the Operations Center. This course also includes scripting, performance tuning, protecting, and recovering the database and storage pools, and an introduction to IBM Storage Protect Plus. The hands-on exercises are performed on three different IBM Storage Protect servers, two on Windows, and one on Linux, with additional systems added to provide the IBM Cloud Object Storage environment. This course is the second in a two-course series. It is for Storage Protect administrators who are familiar with the daily management tasks on a single server, and focuses on incorporating more advanced features, including replication and use of cloud object storage. Basic concepts and installation are not covered in this course.  TS619G, the first course in the series, IBM Storage Protect 8.1.12 Implementation and Administration, covers installation and basic administration of a single server.

IBM Storage Protect 8.1.12 is a data backup and recovery solution designed to help you manage your data retention, reduce the cost of storage, and provide appropriate recovery point objectives to meet any service level agreement. IBM Storage Protect offers improved efficiency and flexibility using object-based data management and policy driven retention. This five-day course will focus on implementation and basic administration of an IBM Storage Protect environment. The hands-on lab exercises are performed on a Windows 2016 environment. The course materials include examples of AIX and Linux commands, when different from Windows.

This module introduces IBM Spectrum Virtualize support for traditional RAID (Redundant Array of Independent Disks) arrays and the Distributed RAID arrays. Traditional RAID (or TRAID) and Distributed RAID (or DRAID) arrays are both data storage virtualization technologies that combines multiple physical disk drive components into one or more logical units. TRAID and DRAID offers increased storage performance, resiliency and low cost, with improved higher availability to recreate lost data from parity information. This module also discuss the benefits of implementing DRAID 6 to boost IO performance versus TRAID 5 in almost all production workloads.If you are enrolling in a Self Paced Virtual Classroom or Web Based Training course, before you enroll, please review the Self-Paced Virtual Classes and Web-Based Training Classes on our Terms and Conditions page, as well as the system requirements, to ensure that your system meets the minimum requirements for this course. http://www.ibm.com/training/terms