Cursos de Ciberseguridad

Curso avanzado de 16h sobre seguridad de servidores MCP en producción. Modelo de amenazas, ataques reales, gateway con RBAC y detección. Con laboratorio.
Los servidores MCP dejaron de ser un experimento. Están en producción, conectados a bases de datos, correo corporativo y sistemas de ticketing, y los invoca un agente que decide por su cuenta cuándo llamarlos.
Ese cambio abrió una superficie de ataque que no se parece a la de una API convencional, y el ecosistema ya tiene la lista de incidentes que lo demuestra: paquetes distribuidos por npm con puertas traseras, ejecución remota de código en clientes de uso masivo, una plataforma de alojamiento que expuso las claves de tres mil servidores, y el primer ataque agéntico que no necesita que nadie haga clic. En mayo de 2026 la NSA publicó una guía de diseño específica para el protocolo, lo que da la medida de dónde estamos.
Este curso monta el perímetro que faltaba en todos esos casos. Trabajamos sobre un laboratorio con infraestructura real, no sobre un simulador: cada participante despliega un gateway delante de una flota de servidores MCP, ejecuta contra ellos los ataques documentados en el ecosistema, y después escribe las políticas que los detienen.
La formación separa siempre y de forma explícita tres niveles de madurez: lo que está en la especificación ratificada, lo que es extensión experimental, y lo que es material comercial de un fabricante. Quien termina sabe dónde está cada frontera, que es lo que permite decidir si algo se despliega el lunes, se prototipa en preproducción, o se comprueba antes de creerlo.
Es la continuación natural del curso de introducción a MCP: aquel enseña a construir e integrar servidores MCP, este enseña a defenderlos en producción.

In today’s data-driven world, maintaining the health and performance of your Guardium Data Protection environment is critical. What happens when you have issues with Guardium Data Protection? Do you know how to gather data about problems that affect your Central Managers, Collectors, and S-TAP and GIM agents? Is your database getting full? Can you gather the files necessary to diagnose severe S-TAP agent issues? This course is designed for Guardium Data Protection administrators who are ready to elevate their troubleshooting skills and ensure the resilience of their data security infrastructure. 

Have you already deployed a unified endpoint management solution into your environment but want to enhance the security posture for admins, users, and devices? This course describes a series of security lifecycle integrations between MaaS360 and other portfolio and third-party offerings. Learners will see how to perform a directory sync with Microsoft Entra ID to automatically import users and groups from an enterprise directory to MaaS360. Enhanced access to multiple services for administrators is enabled with IBM Security Verify, which provides SAML-based authentication to eliminate multiple password entries. Conditional access is demonstrated to show how trusted users and groups from compliant and managed devices can gain access to Microsoft-approved apps and services like Outlook. MaaS360 integration with QRadar SIEM demonstrates how log source files from MaaS360 can be imported into QRadar to monitor for anomolies (malicious emails) and out of compliance events. And finally, MaaS360 integrates with mobile threat detection capabilities to enhance security detection, prevention and response on corporate and personally owned mobile endpoints. 

This hands-on course is designed to provide students with a comprehensive understanding of IBM PowerSC, including its features, benefits, and how to install, configure, and manage it. We will cover the four main pillars of PowerSC: Security, Compliance, threat protection, and Multifactor Authentication (MFA).File Integrity Monitoring (FIM), allow listing, block listing, endpoint detection and response (EDR) and anti-malware capabilities will also be covered.

This course provides database administrators and IT security professionals with the knowledge and practical skills needed to implement and manage robust security in IBM Db2 v12.1 environments. Learners will explore the fundamentals and advanced concepts of Db2 security, including authentication, authorization, and privilege hierarchies. This course covers key topics such as configuring access controls, utilizing database roles and authorities, managing data encryption for secure communications, and applying advanced security features like Row and Column Access Control (RCAC), Label-Based Access Control (LBAC), and Trusted Contexts for multi-tiered architectures. Additionally, students will examine Db2’s built-in auditing capabilities to monitor compliance and ensure secure database operations.

This course provides relational DBAs with essential and advanced skills to manage, secure, recover, and optimize IBM Db2 v12.1 environments. Beginning with foundational concepts, participants will learn how to install Db2, configure instances, manage storage, and create database objects using both command-line and GUI tools. The course then expands into practical techniques for data movement, backup and recovery, and high availability configurations, equipping learners to maintain data integrity and ensure business continuity.Security and concurrency are addressed in depth, including the implementation of user access controls, role-based permissions, encryption methods, Row and Column Access Control (RCAC), Label-Based Access Control (LBAC), and Trusted Contexts for multi-tiered architectures. Participants will also explore Db2’s locking mechanisms and isolation levels to troubleshoot contention issues and manage concurrent workloads effectively.Performance tuning and optimization are emphasized through detailed instruction on the query optimizer, indexing strategies, monitoring tools, and the use of EXPLAIN utilities. Learners will leverage the Db2 AI Optimizer, Design Advisor, and Data Management Console to analyze SQL access plans and improve system responsiveness across transactional and analytical workloads.Through hands-on lab exercises and real-world scenarios, learners will gain the proficiency to manage Db2 environments efficiently and securely, diagnose issues quickly, and ensure high availability and performance in enterprise-scale deployments.

This course provides a high-level overview of the IBM Cognos Analytics v12 Data Module tool and its underlying architecture to provide learners with the skills necessary to master data modeling using the web-based, self-service capabilities of IBM Cognos Analytics v12 Data Modules. Learners will explore the essential steps in building data modules, from understanding the purpose and workflow of data modeling to creating, refining, and optimizing data structures. The course covers various topics, including managing relationships, advanced features and performance optimization, data enrichment with calculations and filters, creating groups and navigation paths, and managing data security. Learners will gain hands-on experience through exercises that enhance their ability to create and customize data modules, review and modify column properties, creating calculations, filters and data groups, and adding column dependencies. These hands on activities ensure learners practice consistency and usability for reporting, dashboarding, and exploration purposes.By the end of this course, learners should be proficient in developing data modules that integrate multiple data sources, support business analysis, and facilitate informed decision-making within the IBM Cognos v12 environment.

This course provides technical professionals with the needed skills for the configuration and administration of an IBM FileNet Content Manager 5.6.x system. It teaches you how to work with an IBM FileNet Content Manager repository within an IBM Cloud Pak for Business Automation OpenShift environment.  In this course, you will configure logging, auditing, security, bulk processing, and use the sweep framework.

This course provides technical professionals with the needed skills to do the IBM Cloud Pak for Integration administration and troubleshooting tasks.The course begins with an introduction to IBM Cloud Pak for Integration. You explore the Red Hat OpenShift Container Platform environment. You manage dashboard security for Cloud Pak Integration. You configure an external LDAP server (OpenLDAP) and add LDAP users to the Cloud Pak environment. You explore the Red Hat OpenShift Container Platform (RHOCP) web console for container management such as Roles, Topology, Cluster Inventory, Alerts, Events, CPU, and Memory. You perform basic administration tasks in the RHOCP web console. You examine the available open-source monitoring options such as Metrics, Alerts, and Dashboards. You also scale the application deployment by using OpenLDAP as an example.You examine the logs for pods by running commands and in the RHOCP console. To troubleshoot common Cloud Pak cluster problems, you get information and logs for nodes, cluster, and pods. You learn how to troubleshoot the Container Engine and the pods that fail to start. You set different log levels for Red Hat OpenShift, check the routes, and understand troubleshooting for installation. You learn how to collect MustGather files for submitting it to IBM Support team for troubleshooting.You upgrade the Integration capabilities and runtimes and Platform Navigator. You also learn also how to remove the Integration capabilities and runtimes.

Participants gain in-depth knowledge of IBM App Connect Enterprise architecture, deployment strategies, security implementation, and troubleshooting techniques. Through hands-on labs administrators learn to effectively manage and maintain IBM App Connect Enterprise environments, helping ensure seamless integration across diverse enterprise systems

Kotlin para quien ya sabe Java: qué cambia, qué se gana en concisión y seguridad frente a nulos, y cómo convivir con el código Java que ya tienes.

La seguridad construida en los cimientos, no añadida al final. Modelado de amenazas y decisiones de diseño que evitan la vulnerabilidad antes de escribirla.

Este curso intensivo de 30 horas ofrece una formación completa en Microsoft Copilot Studio, la herramienta avanzada de Microsoft para la creación de agentes conversacionales y automatización de tareas mediante inteligencia artificial. A lo largo del curso, los participantes aprenderán desde los fundamentos hasta la personalización avanzada, integrando Copilot Studio con servicios empresariales clave como Azure OpenAI, Dataverse, Power Automate y Power BI.

El curso combina teoría y práctica con ejercicios aplicados a escenarios reales, incluyendo soporte técnico, automatización de flujos de trabajo, integración con APIs y desarrollo de dashboards interactivos. Al finalizar, los estudiantes serán capaces de diseñar, implementar y gestionar agentes de IA en entornos empresariales con seguridad y eficiencia

Este curso está diseñado para dotar a los administradores de las habilidades y conocimientos esenciales necesarios para gestionar de manera competente bases de datos PostgreSQL.
Los participantes profundizarán en una experiencia de aprendizaje práctica que cubrirá temas clave como instalación de bases de datos, configuración, optimización del rendimiento, estrategias de respaldo y recuperación, y mejores prácticas de seguridad.

Project Online es una solución de gestión de carteras de proyectos (PPM) con un repositorio de proyectos y recursos centralizado en la nube de Microsoft que ofrece además características avanzadas como gestión documental, de problemas, riesgos y entregables, seguridad multinivel, partes de horas, soporte de flujos de trabajo y fácil integración con otras herramientas de reporting y BI.

El curso presenta las principales funcionalidades de la herramienta de gestión de proyectos Microsoft Project Online desde la perspectiva PWA (Project Web Access) pero mostrando también las características del cliente de escritorio diferenciales respecto al modo de trabajo con Project Professional o Standard.

Haga avanzar su carrera con nuestro programa profesional de aceleración basado en WSO2. Desarrolle la confianza creativa y técnica que requiere para desarrollar tejidos digitales basados en APIs, flujos de integración, seguridad y analítica de datos; competencias requeridas por muchas organizaciones para su transformación digital.

La formación incluye la utilización de las siguientes herramientas y tecnologías: WSO2 Micro Integrator, WSO2 API Manager, WSO2 Identity Server, WSO2 Streaming Integrator, MySQL, Postman, SoapUI.

Haga avanzar su carrera con nuestro programa profesional de aceleración basado en MuleSoft. Desarrolle la confianza creativa y técnica que requiere para desarrollar tejidos digitales basados en APIs, flujos de integración y seguridad; competencias requeridas por muchas organizaciones para su transformación digital.

La formación incluye la utilización de las siguientes herramientas y tecnologías: MuleSoft Anypoint Studio, Flow Designer, Anypoint Exchange, DataWeave, Mule runtimes, API Manager, MySQL, Postman, SoapUI, Kafka, entre otros.

METODOLOGÍA: Utilizamos desafíos, mapas de ideas, tableros digitales y un conjunto de tecnologías para facilitar la formación sobre un proceso fluido de enseñanza y aprendizaje útil y de valor para el participante.

El Curso de Seguridad Avanzada en Linux está diseñado para proporcionar a los participantes los conocimientos y habilidades necesarios para proteger y fortalecer los sistemas Linux contra amenazas y vulnerabilidades. A través de un temario exhaustivo, los estudiantes explorarán los conceptos fundamentales de la seguridad en Linux, así como las técnicas avanzadas para asegurar los sistemas operativos, la red y los datos.

El curso de Seguridad en Linux cubre una amplia gama de temas esenciales para proteger los sistemas basados en Linux, proporcionando a los participantes las habilidades y el conocimiento necesarios para mantener la seguridad de los sistemas y enfrentar los desafíos actuales de seguridad informática.

Este curso está diseñado para aquellos que desean profundizar en los aspectos más técnicos y especializados de la administración de sistemas Linux. Este curso
En él se aborda una variedad de temas avanzados, desde la planificación de la capacidad hasta la seguridad del sistema, resolución de problemas y la configuración de servicios web.

In this one-day advanced course on case solution development, you learn advanced customization of the Calendar, toolbar, and menu widgets. You also learn how to wire widgets together, promote an existing case solution to a workflow project and integrate it with an existing process, and how to configure security for a case solution.

Participants gain in-depth knowledge of IBM App Connect Enterprise architecture, deployment strategies, security implementation, and troubleshooting techniques. Through hands-on labs administrators learn to effectively manage and maintain IBM App Connect Enterprise environments, helping ensure seamless integration across diverse enterprise systems

This course teaches you how to setup, customize, operate, administer, and monitor the IBM MQ Appliance. The course covers initial configuration and setup, administration using the command line interface and web console, security, high availability, disaster recovery, backup/restore, and monitoring, In addition to the instructor-led lectures, the hands-on exercises provide practical experience using a virtual MQ Appliance across the all of the topics.

In this one-day advanced course on case solution development, you learn advanced customization of the Calendar, toolbar, and menu widgets. You also learn how to wire widgets together, promote an existing case solution to a workflow project and integrate it with an existing process, and how to configure security for a case solution.

In this course, you learn about the IBM Verify Access architecture and deployment options and how to position the product within your organization’s landscape of security solutions. You gain skills around how to deploy Verify Access in a containerized environment or on a virtual machine. First, you improve your Verify Access administration skills by managing users, groups, and domains. Then, you are setting up the Reverse Proxy, including the configuration of authentication and authorization processes, protecting the object space with junctions. This course also provides a solid foundation around setting up logging and auditing, preparing you to successfully manage troubleshooting scenarios.

This is an instructor-led course that provides basic introduction of the IBM Security Admin ISPF interface for customers who administer RACF profiles and generate basic RACF overview reports.This course focuses on frequently used administrative functions, standard reports, and verification functions of IBM Security zSecure Admin. Gain experience in administering RACF profiles using the built-in functions and line commands that the ISPF interface provides. Learn how to report and review RACF profiles using the built-in functions and provided line commands. Verification functions that report RACF database inconsistencies are explored and demonstrated. The CKGRACF function is also described. Finally, you also learn how to produce customized reports, tailor the RACF installation data field, and define company-specific custom fields.Please contact ibmlearning@ibm.com for enrollment information.

In this workshop, you learn how to maintain a Resource Access Control Facility (RACF®) database with IBM® Security zSecure Admin and monitor the system with IBM Security zSecure Audit. During hands-on exercises, you act as a RACF security administrator for a fictitious company. In this simulated job role, you learn to define a RACF security environment for a specific department.This workshop teaches the basics of the security administration process and how to implement company security policies and guidelines into specific RACF profile definitions and settings. You learn to verify the quality and validity of the RACF profiles that you define. Finally, you learn how to interpret and report SMF events that the z/OS system logs during the workshop.Please contact ibmlearning@ibm.com for enrollment information.

This course describes audit concerns that IBM® Security zSecure™ Audit reports. The course explains auditing your RACF® database and z/OS subsystems such as CICS, IMS, and DB2. You can measure your security and z/OS system settings against the security requirements of a selected policy level. Also, you learn about an Access Monitor data set containing historic RACF access decisions statistics. This information is used to find profiles, permissions, or connections that are unused and can be removed from the RACF database. Furthermore, you learn reviewing the general SMF and RACF audit settings. This course explains how to use and interpret predefined SMF reports, and how to create customized SMF reports. Finally, the Library and sequential data set status and change analysis functions are explained.Please contact ibmlearning@ibm.com for enrollment information.

Learn the basics of the IBM Security zSecure programming language CARLa. This course teaches you to use the CARLa programming language to create reports for RACF, SMF, UNIX Systems Services (USS), CICS, DB2, and RACF command generation. You spent approximately 40 percent of the course on hands-on lab exercises, where you produce CARLa code that you can use for effective management and reporting on RACF, SMF, USS, and other subsystems. You learn to use CARLa to create custom reports, commands, emails, XML output, or modify existing zSecure RACF functions to fit with your installation's requirements. In addition, you learn how to automate these functions by using them in scheduled batch jobs.Please contact ibmlearning@ibm.com for enrollment information.

In this workshop, you learn to maintain a RACF® database with IBM® Security zSecure™ Admin and monitor the system with IBM Security zSecure Audit. During hands-on exercises, you act as a RACF security administrator for a fictitious company. In this simulated job role, you learn to define a RACF security environment for a specific department. This workshop teaches the basics of the security administration process and how to implement company security policies and guidelines into specific RACF profile definitions and settings. You learn to verify the quality and validity of RACF profiles that you define. Finally, you learn to interpret and report SMF events that the z/OS® system logs during this RACF management workshop.Please contact ibmlearning@ibm.com for enrollment information.

This course provides a high-level overview of the IBM Cognos Analytics v12 Data Module tool and its underlying architecture to provide learners with the skills necessary to master data modeling using the web-based, self-service capabilities of IBM Cognos Analytics v12 Data Modules. Learners will explore the essential steps in building data modules, from understanding the purpose and workflow of data modeling to creating, refining, and optimizing data structures. The course covers various topics, including managing relationships, advanced features and performance optimization, data enrichment with calculations and filters, creating groups and navigation paths, and managing data security. Learners will gain hands-on experience through exercises that enhance their ability to create and customize data modules, review and modify column properties, creating calculations, filters and data groups, and adding column dependencies. These hands on activities ensure learners practice consistency and usability for reporting, dashboarding, and exploration purposes.By the end of this course, learners should be proficient in developing data modules that integrate multiple data sources, support business analysis, and facilitate informed decision-making within the IBM Cognos v12 environment.

Data security and privacy challengers are never-ending. IBM Guardium Data Protection (Guardium) provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. It discovers and classifies sensitive data from across an enterprise, providing real-time data activity monitoring and advanced user behavior analytics to help discover unusual data activity.The course prepares the student to administer Guardium appliances, discover unusual data activity, locate vulnerable data, automate compliance processes, and monitor and protect sensitive data. To proact using Guardium, students complete hands-on lab exercises.This course is based on Guardium Data Protection version 12.1.

This course teaches you how to use IBM App Connect Enterprise to apply advanced topics such as basic security authentication on deployed integrations, message flow monitoring to help in problem determination, and creating user-defined properties in a message flow. The first part of this course covers message flow aggregation, encrypting credentials and storing them in the IBM App Connect vault, and debugging message flows. The second half introduces dynamic features that use IBM App Connect web user Interface to Record and Replay messages, create a business transaction definition, and view various business events in a completed, failed, inconsistent, and in-progress state.

This course provides technical professionals with the needed skills to administer IBM Cloud Pak for Business Automation. The course begins with an introduction to IBM Cloud Pak for Business Automation (CP4BA). You manage platform security for CP4BA and work with Business Teams. You explore the Red Hat OpenShift Container Platform (RHOCP) web console for container management such as Cluster Inventory, Events, CPU, and Memory. You examine the available observe options such as Metrics, Alerts, and Dashboards. You scale the application deployment. You customize the Cloud Pak Platform UI. To troubleshoot common Cloud Pak cluster problems, you get logs for nodes, cluster, and pods. You view the logs for pods by running commands and examine the logs in the RHOCP console. You learn how to troubleshoot the Container Engine and the pods that fail to start. The course concludes with the collection of MustGather files to submit it to the IBM Support team for troubleshooting. 

This course teaches you how to use IBM App Connect Enterprise to apply advanced topics such as basic security authentication on deployed integrations, message flow monitoring to help in problem determination, and creating user-defined properties in a message flow. The first part of this course covers message flow aggregation, encrypting credentials and storing them in the IBM App Connect vault, and debugging message flows. The second half introduces dynamic features that use IBM App Connect web user Interface to Record and Replay messages, create a business transaction definition, and view various business events in a completed, failed, inconsistent, and in-progress state.

This course provides technical professionals with the needed skills to administer IBM Cloud Pak for Business Automation. The course begins with an introduction to IBM Cloud Pak for Business Automation (CP4BA). You manage platform security for CP4BA and work with Business Teams. You explore the Red Hat OpenShift Container Platform (RHOCP) web console for container management such as Cluster Inventory, Events, CPU, and Memory. You examine the available observe options such as Metrics, Alerts, and Dashboards. You scale the application deployment. You customize the Cloud Pak Platform UI. To troubleshoot common Cloud Pak cluster problems, you get logs for nodes, cluster, and pods. You view the logs for pods by running commands and examine the logs in the RHOCP console. You learn how to troubleshoot the Container Engine and the pods that fail to start. The course concludes with the collection of MustGather files to submit it to the IBM Support team for troubleshooting. 

This course teaches students how to transform traditional (monolithic) WebSphere applications to run in a containerized environment–Red Hat OpenShift–by using WebSphere Hybrid Edition. It covers two key reference implementations: Operational Modernization: Repackage the application to deploy in a container while maintaining the monolithic architecture. This solution does not require changes to the application or runtime. It uses Transformation Advisor (part of WebSphere Hybrid Edition) to assess the application, and the Runtime Operator to manage the containerized application on Red Hat OpenShift. Runtime Modernization: Update the application to run on Open Liberty, a modern cloud-native runtime. Modernize some aspects of the application by taking advantage of MicroProfile specifications. This solution uses Transformation Advisor (part of WebSphere Hybrid Edition), and the Open Liberty Operator to deploy and manage the modernized application on Red Hat OpenShift.

IBM Security® Verify Privilege Vault helps keep privileged accounts safe. Accounts are secured in an encrypted vault. Discovering and vaulting privileged accounts helps you understand how many privileged accounts you have, and exactly who has access to your organization’s key systems through real-time session monitoring, recording, and key logging. IBM Security Verify Privilege Vault also helps organizations to maintain compliance through full audit reports on vault activity. In this course, learners will gain hands-on experience with Privilege Vault and learn how to use a variety of Privilege Vault features. This course is designed and built on IBM Security Verify Privilege Vault version 11.6.26.

This course provides students with an understanding of how to create new users in Maximo Manage and manage labor, crafts, and calendar records through specialized applications. We will also use conditional expressions and control properties to implement conditional security.  There is also hands-on lab exercises using a Red Hat OpenShift MAS Manage environment.

In this course, we will look at how to create new users in Maximo Manage and manage labor, crafts, and calendar records through specialized applications. We will also use conditional expressions and control properties to implement conditional security.

This offering covers the fundamental concepts of installing and configuring IBM Cognos Analytics, and administering servers and content, in a distributed environment. In the course, participants will identify requirements for the installation and configuration of a distributed IBM Cognos Analytics software environment, implement security in the environment, and manage the server components. Students will also monitor and schedule tasks, create data sources, and manage and deploy content in the portal and IBM Cognos Administration.

This course provides a high-level overview of the IBM Cognos Analytics Data Module tool and its underlying architecture to provide learners with the skills necessary to master data modeling using the web-based, self-service capabilities of IBM Cognos Analytics Data Modules. Learners will explore the essential steps in building data modules, from understanding the purpose and workflow of data modeling to creating, refining, and optimizing data structures. The course covers various topics, including relationship joins, data enrichment with calculations and filters, creating navigation paths, and managing data security. Learners will gain hands-on experience through exercises that enhance their ability to create and customize data modules, ensuring consistency and usability for reporting, dashboarding, and exploration purposes. By the end of this course, learners should be proficient in developing data modules that integrate multiple data sources, support business analysis, and facilitate informed decision-making within the IBM Cognos environment.

Enterprises are creating, analyzing and keeping more data than ever before. An organization’s underlying storage must support new-era big data and artificial intelligence workloads along with traditional applications while ensuring security, reliability and high performance. IBM Storage Scale meets these challenges as a high-performance solution for managing data at scale. This course is intended for IT professionals tasked with administering a Storage Scale storage cluster consisting of Linux nodes. The course includes information on various Storage Scale features that enable remote access to data that is stored in a cluster file system. This includes: multi-cluster support, clustered NFS, cluster export services (CES) and protocol support (NFS, SMB, and Object), Active File Management (AFM), and AFM-based Asynchronous Disaster Recovery (AFM DR). The features are described in lecture materials and implemented in lab exercises. 

The course includes information on the Storage Scale installer toolkit, installer GUI, cluster upgrade scenarios, cluster health monitoring, cluster performance data collection and monitoring, management GUI, file system encryption, cluster security, and call home features. Many of the features are described in lecture materials and implemented in lab exercises.

This course will expose the beginning z/OS DBAs (Database Administrators) to fundamentals of Database Administration for a Db2 13 for z/OS. This course will teach the students how to physically implement a logical database design using DDL, and teaches considerations of referentially related tables. This course discusses the use of basic utilities, program preparation, serialization, and basic database security. This course does not cover distributed data processing, nor does it cover data sharing.

Learn how to detect insider threats triggered by anomalous or malicious user behavior. Get ready to install, configure, and tune IBM Security® QRadar UBA and the Machine Learning app. Improve your skill to investigate user behavior with UBA and expand your threat detection capabilities across your network with the QRadar® Advisor with Watson™ app.

Gain knowledge on how to integrate IBM Security® QRadar® EDR and SIEM by creating an API application in QRadar EDR and by adding a new log source in QRadar SIEM to add endpoint detection and alerts to QRadar SIEM. Having advanced and automated response capabilities enables analysts to focus on the fight in front of them. This course applies to version 3.12 of the on-premises QRadar EDR offering.

In this course you learn how to integrate QRadar EDR and SIEM by creating an API application in QRadar EDR and by adding a new log source in QRadar SIEM to add endpoint detection and alerts to QRadar SIEM. Integrating QRadar EDR and SIEM amplifies the power of QRadar XDR (extended detection and response) by leveraging AI and automation opportunities. Having advanced and automated response capabilities enables analysts to focus on the fight in front of them.This course applies to version 3.12 of the on-premises IBM Security QRadar EDR offering.

When deploying IBM Security® QRadar® EDR into production, you must configure important details, such as notifications, alerts, and policies. After QRadar EDR is deployed successfully, you must set up your users, groups, and clients, configure your Hive-Cloud score, and define how to handle downloaded and quarantined files from endpoints. Another important maintenance task revolves around monitoring audit logs. This course applies to version 3.12 of the on-premises QRadar EDR offering as well as the January 2024 SaaS-based offering.

In this course, you gain hands-on experience with the IBM Security® QRadar® EDR user interface with a focus on threat hunting, learn how to investigate threats on your endpoints, and manage your endpoints to stay secured and up-to-date. You also observe a detailed demonstration about how to detect malware attacks, and how to remediate these threats.This course applies to version 3.12 of the on-premises QRadar EDR offering as well as the January 2024 SaaS-based offering.

In this course, you learn about the IBM Security® QRadar® EDR architecture and how to position the product within your company’s landscape of security solutions. You gain skills around how to install the QRadar EDR Hive on your premises and the EDR Agents on your endpoints. You can review the user interface and how to navigate the EDR Dashboard while investigating endpoint threats.This course applies to version 3.12 of the on-premises QRadar EDR offering.

Are you ready to explain how QRadar processes data in your organization's environment?Interpret QRadar log sources (events) and network activity (flows) so you can investigate security incidents with ease. Knowing how to search the data from QRadar events, flows, and assets means you can streamline your analysis.

This course is designed and built on IBM Security® QRadar® 7.4.3. and QRadar 7.5.0. The lab is built on QRadar 7.5.0 update 8. What you learn:Create custom log sourcesWork with reference data collections and custom rulesUse X-Force data and Threat Intelligence appUse the Use Case Manager appUse User Behavior Analytics (UBA) and QRadar AdvisorDiscover and perform tuningExplore custom action scriptsIntegrate QRadar with IBM SOAR Skills you gain:Threat investigationQRadar data searchingQRadar X-Force integrationQRadar incident response

QRadar SIEM provides deep visibility into network, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. This 2-day instructor-led course walks you through various advanced topics about QRadar such as custom log sources, reference data collections and custom rules, X-Force data and the Threat Intelligence app, UBA and QRadar Advisor, tuning and custom action scripts. The course also discusses integration with IBM SOAR. Hands-on exercises reinforce the skills learned. The lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

This course is designed and built on QRadar 7.4.3 and QRadar 7.5.0. The lab is based on QRadar 7.5.0 update 8. What you learn:Describe how QRadar collects data to detect suspicious activitiesDescribe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasks Skills you gain:Threat investigationQRadar data searching

IBM Security QRadar enables deep visibility into network, endpoint, user, and application activity. It provides collection, normalization, correlation, and secure storage of events, flows, assets, and vulnerabilities. Suspected attacks and policy breaches are highlighted as offenses. In this course, you learn about the solution architecture, how to navigate the user interface, and how to investigate offenses. You search and analyze the information from which QRadar concluded a suspicious activity. Hands-on exercises reinforce the skills learned. In this 3-day instructor-led course, you learn how to perform the following tasks:Describe how QRadar collects data to detect suspicious activities​​​​​​​Describe the QRadar architecture and data flowsNavigate the user interfaceDefine log sources, protocols, and event detailsDiscover how QRadar collects and analyzes network flow informationDescribe the QRadar Custom Rule EngineUtilize the Use Case Manager appDiscover and manage asset informationLearn about a variety of QRadar apps, content extensions, and the App FrameworkAnalyze offenses by using the QRadar UI and the Analyst Workflow appSearch, filter, group, and analyze security dataUse AQL for advanced searchesUse QRadar to create customized reportsExplore aggregated data managementDefine sophisticated reporting using Pulse DashboardsDiscover QRadar administrative tasksExtensive lab exercises are provided to allow learners an insight into the routine work of an IT Security Analyst operating the QRadar SIEM platform. The exercises cover the following topics:Architecture exercisesUI Overview exercisesLog Sources exercisesFlows and QRadar Network Insights exercisesCustom Rule Engine (CRE) exercisesUse Case Manager app exercisesAssets exercisesApp Framework exercisesWorking with Offenses exercises.Search, filtering, and AQL exercisesReporting and Dashboards exercisesQRadar Admin tasks exercisesThe lab environment for this course uses the IBM QRadar SIEM 7.5 platform.

This offering covers the fundamental concepts of installing and configuring IBM Cognos Analytics, and administering servers and content, in a distributed environment. In the course, participants will identify requirements for the installation and configuration of a distributed IBM Cognos Analytics software environment, implement security in the environment, and manage the server components. Students will also monitor and schedule tasks, create data sources, and manage and deploy content in the portal and IBM Cognos Administration.

This course provides a high-level overview of the IBM Cognos Analytics Data Module tool and its underlying architecture to provide learners with the skills necessary to master data modeling using the web-based, self-service capabilities of IBM Cognos Analytics Data Modules. Learners will explore the essential steps in building data modules, from understanding the purpose and workflow of data modeling to creating, refining, and optimizing data structures. The course covers various topics, including relationship joins, data enrichment with calculations and filters, creating navigation paths, and managing data security. Learners will gain hands-on experience through exercises that enhance their ability to create and customize data modules, ensuring consistency and usability for reporting, dashboarding, and exploration purposes. By the end of this course, learners should be proficient in developing data modules that integrate multiple data sources, support business analysis, and facilitate informed decision-making within the IBM Cognos environment.

Students perform AIX management tasks like scheduling jobs, system backups, starting up and shutting down the system, installing AIX, software maintenance tasks, and TCP/IP configuration. This course is the second of a sequence of two courses covering basic AIX management tasks.

This course enables students to perform certain basic management tasks on the AIX operating system. This includes managing devices, LVM, file systems, and user accounts. This course is the first of a sequence of two courses covering basic AIX management tasks. 

IBM Guardium® Data Protection (Guardium) is a scalable data security platform that meets the demands of modern environments. It provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the foundational level processes, procedures, and practices necessary to configure access to Guardium, manage Guardium system settings, and manage Guardium data. Hands-on exercises reinforce the skills learned. This course is based on Guardium version 12.1.

IBM Guardium® Data Protection provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the foundational level processes, procedures, and practices necessary to locate databases and data, discover vulnerabilities, and automate the compliance process.Note: This course is based on IBM Guardium Data Protection version 12.1.

IBM Guardium® Data Protection (Guardium) is a scalable data security platform that meets the demands of modern environments. It provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. This course provides the processes, procedures, and practices necessary to configure Guardium to monitor and protect sensitive data. Hands-on exercises reinforce the skills learned. Note: This course is based on version 12.1 of IBM Guardium Data Protection.

This course provides an overview of Applications Manager and Sterling Order Management System. It describes the business models supported by Sterling Order Management System. It also throws light on how to create organizations, define participants, create users, and configure user permissions. In this 5-hour long self-paced training interactive video course, students learn about topics such as how to map participants to different roles defined in Sterling Order Management System, configure attributes for the roles, configure prerequisites for user creation, and configure users and data access policies. The course involves procedural information, demonstrations, quizzes, and exercises in the form of hands-on labs and pen-and-paper activity, and their solutions. You must complete all of the required activities before you can take the quizzes. The course certificate is awarded after passing all the quizzes.

This course begins with an overview of Sterling Order Management System and the business models it supports. The course then describes how to define participants and create organizations and users. Through a combination of procedural information and exercises, students will learn about topics such as how to assign attributes to the different roles defined in Sterling Order Management System and configure user access policies. The course also covers Process Modeling features, including how to set up a business process workflow for an organization. Students are then introduced to statuses, conditions, transactions, and other components of a process type pipeline. The course then describes how to create a process type pipeline.

This course provides technical professionals with the needed skills to do the IBM Cloud Pak for Integration administration and troubleshooting tasks.The course begins with an introduction to IBM Cloud Pak for Integration. You explore the Red Hat OpenShift Container Platform environment. You manage dashboard security for Cloud Pak Integration. You configure an external LDAP server (OpenLDAP) and add LDAP users to the Cloud Pak environment. You explore the Red Hat OpenShift Container Platform (RHOCP) web console for container management such as Roles, Topology, Cluster Inventory, Alerts, Events, CPU, and Memory. You perform basic administration tasks in the RHOCP web console. You examine the available open-source monitoring options such as Metrics, Alerts, and Dashboards. You also scale the application deployment by using OpenLDAP as an example.You examine the logs for pods by running commands and in the RHOCP console. To troubleshoot common Cloud Pak cluster problems, you get information and logs for nodes, cluster, and pods. You learn how to troubleshoot the Container Engine and the pods that fail to start. You set different log levels for Red Hat OpenShift, check the routes, and understand troubleshooting for installation. You learn how to collect MustGather files for submitting it to IBM Support team for troubleshooting.You upgrade the Integration capabilities and runtimes and Platform Navigator. You also learn also how to remove the Integration capabilities and runtimes.

This course is also available as self-paced virtual (e-learning) course Essentials of Service Development for IBM DataPower Gateway V7.5 (ZE751G). This course teaches you the essential skills that are required to configure, implement, and troubleshoot services that are developed on the IBM DataPower Gateways (IDG) with firmware version 7.5.0, regardless of use case.The DataPower Gateways allow an enterprise to simplify, accelerate, and enhance the security capabilities of its XML and web services deployments, and extend the capabilities of its service-oriented architecture (SOA) infrastructure. The gateways also extend these capabilities into the JSON, REST, and Mobile application areas.Through a combination of instructor-led lectures and hands-on lab exercises, you learn how to develop and debug services that are implemented on the DataPower gateways. These skills include WebGUI and Blueprint Console navigation, service type selection, basic multi-protocol gateway configuration, creating and using cryptographic objects, and configuring SSL connections. You also learn how to use various problem determination tools such as logs, monitors, and probes, and techniques for testing DataPower services and handling errors.Hands-on exercises give you experience working directly with a DataPower Gateway. The exercises focus on skills such as creating multi-protocol gateways, working with cryptographic and SSL objects, configuring service level monitoring, troubleshooting services, handling errors in a service policy, and deploying a service from a pattern.

This course teaches you the skills that are needed to administer IBM WebSphere Application Server V9.This release of IBM WebSphere Application Server provides enhanced support for standards (notably Java 7 EE), emerging technology, and a choice of development frameworks.In this course, you learn how to configure and maintain IBM WebSphere Application Server V9 in a single-server environment. You learn how to deploy enterprise Java applications in a single computer configuration. In addition, you learn how to work with features of WebSphere Application Server V9, such as the wsadmin scripting interface, security, and performance monitoring.Hands-on exercises throughout the course give you practical experience with the skills you develop in the lectures.

IBM Storage Protect is an enterprise data protection solution designed to help you streamline your data protection processing, reduce the cost of storage, and provide the flexibility and security to meet any service level agreement. IBM Storage Protect optimizes storage utilization by using incremental forever as well as block-level backup and replication, policy-based data management, and an intuitive interface, the Operations Center. In this course, you learn how the use of two or more Storage Protect servers provides more options for data movement in the environment, like replication to multiple targets. You also use IBM Cloud Object Storage to create a storage pool for backups and long-term retention. The bulk of the administrative tasks are performed using the Operations Center and Command Builder which provides a command line interface for all servers configured in the Operations Center. This course also includes scripting, performance tuning, protecting, and recovering the database and storage pools, and an introduction to IBM Storage Protect Plus. The hands-on exercises are performed on three different IBM Storage Protect servers, two on Windows, and one on Linux, with additional systems added to provide the IBM Cloud Object Storage environment. This course is the second in a two-course series. It is for Storage Protect administrators who are familiar with the daily management tasks on a single server, and focuses on incorporating more advanced features, including replication and use of cloud object storage. Basic concepts and installation are not covered in this course.  TS619G, the first course in the series, IBM Storage Protect 8.1.12 Implementation and Administration, covers installation and basic administration of a single server.

Learn how to plan for, implement, and manage the ongoing operations of an IBM i. Emphasis is on security, system availability, backup and recovery, system software management, and problem determination. Also, get an introduction to the architecture and terminology of the IBM i.

The course includes information on the Storage Scale installer toolkit, installer GUI, cluster upgrade scenarios, cluster health monitoring, cluster performance data collection and monitoring, management GUI, file system encryption, cluster security, and call home features. Many of the features are described in lecture materials and implemented in lab exercises.

IBM z15 has been designed for pervasive encryption, enabling organizations to encrypt 100% of an organization’s IBM Z critical business data in-flight and at-rest, with no application changes and no impact to SLAs. IBM z15 makes pervasive encryption the new standard in data protection and the foundation of a larger data security and protection strategy.z/OS is designed to provide new policy-based encryption options that take full advantage of the improvements in the z15 platform. These new capabilities include:Data set encryption, which is one aspect of pervasive encryption, provides enhanced data protection for many z/OS data sets gives users the ability to encrypt data without needing to make changes to applications to embed encryption APIs within applications.New z/OS policy controls which make it possible to use pervasive encryption to protect user data and simplify the task of compliance for many z/OS data sets, zFS file systems, and Coupling Facility structures.Pervasive encryption for IBM Z® is a consumable approach to enable extensive encryption of data in-flight and at-rest to substantially simplify encryption and reduce costs associated with protecting data.In this course you will learn how to implement Pervasive Encryption in your z/OS installation. The course explores in detail, the various technologies that are involved in z System and z/OS Cryptographic Services, ICSF, RACF and DFSMS access method Services.In the hands-on exercises, you begin with the setup of your hardware crypto environment (CCA crypto express and CPACF), then you will load and activate your AES master keys, setup ICSF and its Key datasets (CKDS PKDS TKDS), then define your data encryption keys, activate your data set encryption policy, and encrypt your data sets and zFS filesystems.These exercises reinforce the concepts and technologies being covered in the lectures.

This course is designed to teach students the new features and enhanced functions provided in z/OS Version 2 Release 4. The software updates and enhancements for z/OS V2R4 are presented in groups based on closely associated z/OS components. The groups include enhancements to the base control program, sysplex features, UNIX System Services, the data storage subsystem, Communications Server, and security components, such as RACF.Finally, the installation and migration issues relating to installation of z/OS V2.4 are discussed.

This classroom course introduces the base elements, optional features, and servers that are provided in z/OS. It focuses on the system service facilities that are provided by the z/OS Base Control Program (BCP). It teaches the students the functions of major software base elements in the management of jobs, tasks, storage, data, and problems. It also addresses how these functions can be affected by the system programmer.Students are introduced to the services provided by the servers which execute in the z/OS environments, such as the Communications Server and the Security Server. Installation packaging options and steps to install the z/OS environments also are introduced.

This course will expose the beginning z/OS DBAs (Database Administrators) to fundamentals of Database Administration for a Db2 12 for z/OS. This course will teach the students how to physically implement a logical database design using DDL, and teaches considerations of referentially related tables. This course discusses the use of basic utilities, program preparation, serialization, and basic database security. This course does not cover distributed data processing, nor does it cover data sharing.

Learn implementation for Information Management System (IMS) using Resource Access Control Facility (RACF) as the external security manager, and the installation provided security exit routines. Apply classroom lectures with security paper lab exercises in which you setup the security definitions.

This course prepares you to be a more effective security administrator as you gain experience and confidence in using the RACF component of the z/OS Security Server. To reinforce lectures, the course offers hands-on exercises where you use the RACF component of the z/OS Security Server to define users, set up group structures, define general resources, protect z/OS data sets, and use several RACF utilities.

This course is designed to enhance the skills of a IBM i System Operator. In this class, we will explain the concept of how LPAR works and discuss the functions provided by the HMC. We will discuss the IBM i Access Family of products in general and Access Client Solutions, specifically.We will discuss the different types of security that you can implement in order to control who has access to your data and what they can do with that data if they are allowed access. We will discuss security control via system values, user and group profiles, authorization lists, and adopted authority.  This course will help you to develop additional skills in the areas of work management and how to create a basic CL program. In the area of CL programming, we will discuss concepts of programming, then how to create a basic CL program using the traditional application development tools PDM and SEU. You will also learn the steps to create a menu using SDA. You will learn some tips that you can use to help improve your IBM i operations. We will also discuss about journaling overview and some tips which improved operator work. 

En esta Escuela de larga duración el alumno adquirirá las competencias necesarias para afrontar proyectos de desarrollo en Java, utilizando el framework Spring y aplicando buenas prácticas en materia de clean code, seguridad y mantenimiento de código fuente.

El entorno de trabajo será el IDE Eclipse y se aprenderá a usar GIT / Github para el control de versiones. El curso tiene un foco en el Test Driven Development y desde el primer día se trabajará con pruebas unitarias en JUnit y Mockito. Se incidirá especialmente en el framework Spring, APIs REST y microservicios.

Este curso realiza un recorrido por la administración de IBM Security QRadar SIEM

El Curso de Hacking Ético está diseñado para proporcionar a los estudiantes los conocimientos y habilidades fundamentales necesarios para comprender y aplicar el hacking ético de manera responsable y legal. Durante este curso, exploraremos los conceptos y fundamentos del hacking ético, centrándonos en el desarrollo de habilidades prácticas para identificar, evaluar y resolver vulnerabilidades y problemas de seguridad en sistemas informáticos.

El objetivo principal de este curso es obtener una apreciación práctica de cómo aplicar COBIT 5 a problemas de negocio específicos, puntos de penalización, arranques de eventos y escenarios de riesgo dentro de una organización. Aprender cómo implementar y aplicar COBIT 5 en su propia empresa y cómo utilizarlo para aplicarlo en iniciativas de cliente.
El curso está soportado por una serie de ejercicios prácticos y casos basados en escenarios. Los alumnos aprender a aplicar el enfoque de ciclo de vida de mejora continua de COBIT 5 para tratar los requerimientos y establecer y mantener un enfoque sostenible para gobernar y gestionar IT de empresa como una práctica de negocio normal. COBIT 5 proporciona la guía de ISACA para el gobierno y gestión de TI. Está basado en más de 15 años de uso y aplicación práctica de COBIT en múltiples empresas tanto desde el punto de vista de negocio, como de TI, como de riesgos, seguridad y aseguramiento de la calidad. Hoy, más que nunca, la información y las tecnologías relacionadas necesitan ser gobernadas, gestionadas y operadas de manera global, mediante un modelo de procesos integrado que proporcione una cobertura total de los roles, responsabilidades y prácticas requeridas. COBIT 5 proporciona una marco de trabajo exhaustivo que asiste a las empresas para conseguir sus objetivos para el gobierno y gestión de TI. Ayuda a crear el valor óptimo de TI manteniendo un equilibrio entre el logro de beneficios y la optimización de los niveles de riego y el uso de recursos. COBIT 5 es genérico, y es útil para empresas de todos los tamaños, sin importar el sector.