Are you ready to explain how QRadar processes data in your organization's environment?Interpret QRadar log sources (events) and network activity (flows) so you can investigate security incidents with ease. Knowing how to search the data from QRadar events, flows, and assets means you can streamline your analysis.
This course is designed and built on IBM Security® QRadar® 7.4.3. and QRadar 7.5.0. The lab is built on QRadar 7.5.0 update 8. What you learn:Create custom log sourcesWork with reference data collections and custom rulesUse X-Force data and Threat Intelligence appUse the Use Case Manager appUse User Behavior Analytics (UBA) and QRadar AdvisorDiscover and perform tuningExplore custom action scriptsIntegrate QRadar with IBM SOAR Skills you gain:Threat investigationQRadar data searchingQRadar X-Force integrationQRadar incident response
QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned. The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.
This course is designed and built on QRadar 7.4.3 and QRadar 7.5.0. The lab is based on QRadar 7.5.0 update 8. What you learn:Describe how QRadar collects data to detect suspicious activitiesDescribe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasks Skills you gain:Threat investigationQRadar data searching
IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned. In this 3-day instructor-led course, you learn how to perform the following tasks:Describe how QRadar collects data to detect suspicious activitiesDescribe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasksExtensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics:Architecture exercisesUI Overview exercisesLog Sources exercisesFlows and QRadar Network Insights exercisesCustom Rule Engine (CRE) exercisesUse Case Manager app exercisesAssets exercisesApp Framework exercisesWorking with Offenses exercises.Search, filtering, and AQL exercisesReporting and Dashboards exercisesQRadar Admin tasks exercisesThe lab environment for this course uses the IBM QRadar SIEM 7.5 platform.
This course provides participants with a high-level overview of the IBM Cognos Analytics Dashboard tool and its underlying architecture. They will explore the powerful features of IBM Cognos Analytics dashboards to transform raw data into actionable insights. Through interactive lessons, practical exercises, and real-world scenarios, learners will gain the skills to create, customize, and share dynamic dashboards that drive data-informed decisions.Learners will gain hands-on experience through exercises that enhance their ability to create and customize dashboards, stories, and explorations.By the end of this course, learners should be proficient in creating and customizing dashboards, using Cognos Analytics tools and AI Assistant, integrating and visualize data from multiple sources, employing advanced features like 3D maps, forecasting, and drill-through definitions to enhance insights, and much more.
This course teaches Professional Report Authors about advanced report building techniques using relational data models, and ways of enhancing, customizing, and managing professional reports. The course builds on topics presented in the Fundamentals course. Attendees will participate in interactive demonstrations and exercises that illustrate key concepts while learning how to use advanced features in the product builds on topics learned in the Fundamentals course.
Students will explore IBM Cognos Analytics report authoring and different report object types (list, crosstab, chart, visualization, etc.). They will also create and format reports using grouping, headers, footers, and other formatting options. Also covered is the ability to focus reports by filtering data and using prompts. Students will learn to add value to reports using calculations and additional report-building techniques as well as how to enhance reports with advanced formatting and exceptional data highlighting.
This offering covers the fundamental concepts of installing and configuring IBM Cognos Analytics, and administering servers and content, in a distributed environment. In the course, participants will identify requirements for the installation and configuration of a distributed IBM Cognos Analytics software environment, implement security in the environment, and manage the server components. Students will also monitor and schedule tasks, create data sources, and manage and deploy content in the portal and IBM Cognos Administration.
This course provides a high-level overview of the IBM Cognos Analytics Data Module tool and its underlying architecture to provide learners with the skills necessary to master data modeling using the web-based, self-service capabilities of IBM Cognos Analytics Data Modules. Learners will explore the essential steps in building data modules, from understanding the purpose and workflow of data modeling to creating, refining, and optimizing data structures. The course covers various topics, including relationship joins, data enrichment with calculations and filters, creating navigation paths, and managing data security. Learners will gain hands-on experience through exercises that enhance their ability to create and customize data modules, ensuring consistency and usability for reporting, dashboarding, and exploration purposes. By the end of this course, learners should be proficient in developing data modules that integrate multiple data sources, support business analysis, and facilitate informed decision-making within the IBM Cognos environment.
This course provides participants with a high-level overview of the IBM Cognos Analytics suite of products and their underlying architecture. They will examine each component as it relates to an Analytics solution. Participants will be shown a range of resources to provide additional information on each product.
This course will get you the skills you need to run and manage an IBM i related cloud and DevOps environment. You will be introduced to the world of DevOps, Ansible, IBM PowerVC, Terraform, IBM Cloud Automation Manager and CI/CD concepts as they relate to IBM i. Learning these concepts will be easy with hands-on access to our lab environment. Completion of this course will get you an IBM badge!
This introductory course enables a new system operator to develop basic to intermediate level skills needed for day-to-day operations of IBM i. Focus is given to using the GUI (IBM i Access Client Solutions and IBM Navigator for i) as well as 5250 emulation sessions to perform tasks including job control, monitoring, sending messages, managing systems devices, and more. Lab demos reinforce the lecture topics and prepare the student to successfully operate IBM i on IBM Power. Completion of this course gets you an IBM badge: https://www.credly.com/org/ibm/badge/system-operator-for-ibm-i-foundations.
This course is designed to prepare students to install and configure a highly available cluster using PowerHA SystemMirror. A high availability solution ensures that the failure of any component of the solution, be it hardware, software, or system management, does not cause the application and its data to be inaccessible to the user community.
This course enables students to install and manage open source software on the AIX operating system. This includes installing, updating, and removing RPM packages, from the IBM AIX Toolbox for Open Source Software.
Students perform AIX management tasks like scheduling jobs, system backups, starting up and shutting down the system, installing AIX, software maintenance tasks, and TCP/IP configuration. This course is the second of a sequence of two courses covering basic AIX management tasks.
This course enables students to perform certain basic management tasks on the AIX operating system. This includes managing devices, LVM, file systems, and user accounts. This course is the first of a sequence of two courses covering basic AIX management tasks.
IBM Guardium® Data Protection (Guardium) is a scalable data security platform that meets the demands of modern environments. It provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the foundational level processes, procedures, and practices necessary to configure access to Guardium, manage Guardium system settings, and manage Guardium data. Hands-on exercises reinforce the skills learned. This course is based on Guardium version 12.1.
IBM Guardium® Data Protection provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the foundational level processes, procedures, and practices necessary to locate databases and data, discover vulnerabilities, and automate the compliance process.Note: This course is based on IBM Guardium Data Protection version 12.1.
IBM Guardium® Data Protection (Guardium) is a scalable data security platform that meets the demands of modern environments. It provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the processes, procedures, and practices necessary to configure Guardium to monitor and protect sensitive data. Hands-on exercises reinforce the skills learned. Note: This course is based on version 12.1 of IBM Guardium Data Protection.