Cursos de Ciberseguridad

QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned. The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

This course is designed and built on QRadar 7.4.3 and QRadar 7.5.0. The lab is based on QRadar 7.5.0 update 8. What you learn:Describe how QRadar collects data to detect suspicious activitiesDescribe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasks Skills you gain:Threat investigationQRadar data searching

IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned. In this 3-day instructor-led course, you learn how to perform the following tasks:Describe how QRadar collects data to detect suspicious activities​​​​​​​Describe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasksExtensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics:Architecture exercisesUI Overview exercisesLog Sources exercisesFlows and QRadar Network Insights exercisesCustom Rule Engine (CRE) exercisesUse Case Manager app exercisesAssets exercisesApp Framework exercisesWorking with Offenses exercises.Search, filtering, and AQL exercisesReporting and Dashboards exercisesQRadar Admin tasks exercisesThe lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

This course enables students to perform certain basic management tasks on the AIX operating system. This includes managing devices, LVM, file systems, and user accounts. This course is the first of a sequence of two courses covering basic AIX management tasks. 

IBM Guardium® Data Protection (Guardium) is a scalable data security platform that meets the demands of modern environments. It provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the foundational level processes, procedures, and practices necessary to configure access to Guardium, manage Guardium system settings, and manage Guardium data. Hands-on exercises reinforce the skills learned. This course is based on Guardium version 12.1.

IBM Guardium® Data Protection provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the foundational level processes, procedures, and practices necessary to locate databases and data, discover vulnerabilities, and automate the compliance process.Note: This course is based on IBM Guardium Data Protection version 12.1.

IBM Guardium® Data Protection (Guardium) is a scalable data security platform that meets the demands of modern environments. It provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the processes, procedures, and practices necessary to configure Guardium to monitor and protect sensitive data. Hands-on exercises reinforce the skills learned. Note: This course is based on version 12.1 of IBM Guardium Data Protection.

IBM Safer Payments is an enterprise fraud detection solution. It is a designed and focused on real time payment transaction processing. Safer Payments provides complex and dynamic rules building, evaluation and execution. Built with real time performance, management, and redundancy in mind.In this course, IBM Safer Payments' case management capabilities are presented in detail. Students will learn how to configure and customize the built-in case management, and the workflow and activities involved when investigating cases.

IBM Safer Payments is an enterprise fraud detection solution. It is a designed and focused on real time payment transaction processing. Safer Payments provides complex and dynamic rules building, evaluation and execution. Built with real time performance, management, and redundancy in mind.In this course, all of the IBM Safer Payments model capabilities are presented in detail. The following modelling concepts are covered: index, profiling techniques (with and without index sequence), model components comprised of rulesets, PMML, Python and Internal Random Forest, elements of the simulation environment including Rule Generation and Internal Random Forest, as well as the sampling techniques. All these concepts will be followed by the hands-on exercises.

IBM Safer Payments is an enterprise fraud detection solution. It is a designed and focused on real time payment transaction processing. Safer Payments provides complex and dynamic rules building, evaluation and execution. Built with real time performance, management, and redundancy in mind.In this course, System Administrators who will be involved in any aspect of deploying, customizing, and implementing the Safer Payment solution will get a hands-on overview of the product. Students will get an understanding of how to install, configure, and setup the system as well as an overview about Cluster Management and Monitoring Safer Payments. This course focuses on topics for System Administrators who manage Safer Payments.

IBM Safer Payments is an enterprise fraud detection solution. It is a designed and focused on real time payment transaction processing. Safer Payments provides complex and dynamic rules building, evaluation and execution. Built with real time performance, management, and redundancy in mind.In this course, technical resources that will be involved in any aspect of deploying, customizing, and implementing the Safer Payment solution will get a hands-on overview of the product. Students will get an understanding of how to install, configure, and setup the system for Analysts as well as basics on system administration.

IBM Safer Payments is an innovative real-time payment fraud prevention and detection solution for all cashless payment types. IBM Safer Payments provides not only model capabilities based on inbuilt tools, but also the option to import externally built fraud models for real-time decision making. In this course, IBM Safer Payments' case management capabilities are presented in details. Students will learn how to configure and customize the built-in case management, and the workflow and activities involved when investigating cases.

IBM Safer Payments is an innovative real-time payment fraud prevention and detection solution for all cashless payment types. IBM Safer Payments provides not only model capabilities based on inbuilt tools, but also the option to import externally built fraud models for real-time decisioning. In this course, all of the IBM Safer Payments model capabilities are presented in details. The following modelling concepts are covered: index, profiling techniques (with and without index sequence), model components comprised of rulesets, PMML, Python and Internal Random Forest, elements of the simulation environment including Rule Generation and Internal Random Forest, as well as the sampling techniques. All these concepts will be followed by the hands-on exercises that students are expected to complete.

IBM Safer Payments is an innovative real-time payment fraud prevention and detection solution for all cashless payment types. In this course, System Administrators that will be involved in any aspect of deploying, customizing, and implementing the Safer Payment solution will get a hands-on overview of the product. Students will get an understanding of how to install, configure, and setup the system as well as an overview about Cluster Management and Monitoring Safer Payments. This course focuses on topics for System Admins who manage Safer Payments.

IBM Safer Payments is an innovative real-time payment fraud prevention and detection solution for all cashless payment types. In this course, technical resources that will be involved in any aspect of deploying, customizing, and implementing the IBM Safer Payment solution will get a hands-on overview of the product. Students will get an understanding of how to install, configure, and setup the system for Analysts as well as basics on system administration.

In this four-day course, you learn about installation, configuration and administration of IBM Storage Protect Plus v10.1.8. This begins with a review of the software features and functions, and the basic requirements, including architecture and data movement, and upgrade of the various components. Then, through lecture and hands-on labs, you learn how to deploy an environment as a virtual appliance or as a set of containers. You add providers and create customized SLA policies with options. You associate providers with policy to protect data in file systems and virtual machines, a variety of applications and databases, and Kubernetes and OpenShift containers. You configure and manage user access to the system and to the providers you protect. You manage jobs, plan and prepare for disaster recovery, view log files for monitoring and troubleshooting, and create custom reports.

In this three-day course, you learn how to install, configure and administer IBM Storage Protect Plus v10.1.6. You begin with a review of the software capabilities, requirements, and architecture. Then, through lecture and hands-on labs, you learn how to perform the various tasks required to configure the environment on an installed virtual appliance. You customize SLA policies and make use of available options to protect virtual machines and applications, as well as the IBM Storage Protect Plus catalog. You monitor and manage jobs, plan and prepare for disaster recovery, view log files, and create custom reports.

IBM Storage Protect is an enterprise data protection solution designed to help you streamline your data protection processing, reduce the cost of storage, and provide the flexibility and security to meet any service level agreement. IBM Storage Protect optimizes storage utilization by using incremental forever as well as block-level backup and replication, policy-based data management, and an intuitive interface, the Operations Center. In this course, you learn how the use of two or more Storage Protect servers provides more options for data movement in the environment, like replication to multiple targets. You also use IBM Cloud Object Storage to create a storage pool for backups and long-term retention. The bulk of the administrative tasks are performed using the Operations Center and Command Builder which provides a command line interface for all servers configured in the Operations Center. This course also includes scripting, performance tuning, protecting, and recovering the database and storage pools, and an introduction to IBM Storage Protect Plus. The hands-on exercises are performed on three different IBM Storage Protect servers, two on Windows, and one on Linux, with additional systems added to provide the IBM Cloud Object Storage environment. This course is the second in a two-course series. It is for Storage Protect administrators who are familiar with the daily management tasks on a single server, and focuses on incorporating more advanced features, including replication and use of cloud object storage. Basic concepts and installation are not covered in this course.  TS619G, the first course in the series, IBM Storage Protect 8.1.12 Implementation and Administration, covers installation and basic administration of a single server.

IBM Storage Protect 8.1.12 is a data backup and recovery solution designed to help you manage your data retention, reduce the cost of storage, and provide appropriate recovery point objectives to meet any service level agreement. IBM Storage Protect offers improved efficiency and flexibility using object-based data management and policy driven retention. This five-day course will focus on implementation and basic administration of an IBM Storage Protect environment. The hands-on lab exercises are performed on a Windows 2016 environment. The course materials include examples of AIX and Linux commands, when different from Windows.

Este curso realiza un recorrido por la administración de IBM Security QRadar SIEM