Embrace the Microsoft hype! Get 50% off on Microsoft Instructor-led Training courses!

MyGK
Support
Canada Canada - English
Checkout

Cart () Loading...

    • Quantity:
    • Delivery:
    • Dates:
    • Location:

    $

Subtotal

$

Checkout

or Continue Shopping

Course  
Contact Sales
Support
Checkout

Cart () Loading...

    • Quantity:
    • Delivery:
    • Dates:
    • Location:

    $

Subtotal

$

Checkout

or Continue Shopping

Request Group Training

Security Operations (SecOps) Fundamentals

Learn about the Security Incident Response, Vulnerability Response, and Threat Intelligence applications.

This two-day course covers the foundational topics of the ServiceNow Security Operation suite. The Security Operations Suite includes the Security Incident Response, Vulnerability Response, and Threat Intelligence applications. The Security Operations Suite provides the tools needed to manage the identification of threats and vulnerabilities within your organization as well as specific tools to assist in the management of Security Incidents.

GK# 821285 Vendor# Secops Funds
Vendor Credits:
No matching courses available.
Start learning as soon as today! Click Add To Cart to continue shopping or Buy Now to check out immediately.
Access Period:
Scheduling a custom training event for your team is fast and easy! Click here to get started.
$
Your Selections:
Location:
Access Period:
No available dates
Add To Cart

BUY NOW

Request a quote

Who Should Attend?

This course is designed for Security Operations administrators, ServiceNow administrators, and consultants who need to configure and administer ServiceNow Security Management. Additional training in ServiceNow administration, scripting, integration, and development would be helpful.

What You'll Learn

A combination of lecture content and lab work helps attendees achieve the following:

  • Discuss the Current State of Security
  • Explain the Security Operations Maturity levels
  • Describe Security Incident Response Components and Configuration
  • Demonstrate the Baseline Security Incident Response Lifecycle
  • Identify Security Incident Response Workflow-Based Responses
  • Configure Vulnerability Assessment and Management Response tools
  • Explore the ServiceNow Threat Intelligence application
  • Employ Threat Sources and Explore Attack Modes and Methods
  • Define Observables, Indicators of Compromise (IOC) and IoC Look Ups
  • Discuss Security Operations Common Functionality
  • Use Security Operations Integrations
  • Demonstrate how to view and analyze Security Operations data

Course Outline

DAY ONE

Module 1: Security Operations Overview

  • 1.1 Current State of Security and Security Operations Maturity Levels
  • 1.2 Introducing ServiceNow Security Operations
  • 1.3 Essential Platform and Security Administration Concepts
  • Lab 1.3 Security Operations User Administration
  • 1.4 Security Operations Common Functionality
  • Lab 1.4.1 Security Operations Common Functionality
  • Lab 1.4.2 Email Parser

Module 2: Vulnerability Response

  • 2.1 Vulnerability Response Overview
  • Lab 2.1 Explore the Vulnerability Response Application
  • 2.2 Vulnerability Classification and Assignment
  • Lab 2.2 Explore Vulnerable Items and Vulnerability Groups
  • 2.3 Vulnerability Management
  • Lab 2.3 Vulnerability Groups (for Grouping Vulnerable Items)
  • 2.4 Configuration Compliance
  • Lab 2.4 Vulnerability Remediation

DAY TWO

Module 3: Security Incident Response

  • 3.1 Security Incident Response Overview
  • 3.2 Security Incident Response Components and Configuration
  • Lab 3.2 Security Incident Response Configuration
  • 3.3 Baseline Security Incident Response Lifecycle
  • Lab 3.3 Creating Security Incidents
  • 3.4 Security Incident Response Workflow-Based Responses

Module 4: Threat Intelligence

  • 4.1 Threat Intelligence Definition
  • 4.2 Threat Intelligence Terminology
  • 4.3 Threat Intelligence Toolsets
  • Lab 4.3.1 Review and Update an Existing Attack Mode or Method
  • Lab 4.3.2 Working with Indicators of Compromise (IOC) Lookups
  • Lab 4.3.3 Automated Lookups in Security Incidents
  • 4.4 Trusted Security Circles

Module 5: Security Operations Integrations

  • 5.1 Work with Security Operations
  • Lab 5.1 Navigating Security Operations Integrations

Module 6: Data Visualization

  • 6.1 Understand Security Operations Monitoring and Reporting
BUY NOW

Labs Outline
  • Lab 1.3: Security Operations User Administration
  • Lab 2.2: Security Operations Common Functions
  • Lab 2.3: Security Operations Email Parser
  • Lab 3.1: Explore the Vulnerability Response Application
  • Lab 3.1.2: Explore Vulnerability Entries
  • Lab 3.2: Explore Vulnerable Items and Solutions
  • Lab 3.2.2: Watch Topics and Remediation Efforts
  • Lab 3.2.3: Vulnerability Remediation
  • Lab 4.2 Creating Security Incidents
  • Lab 4.2.2 Security Incident Response Configuration
  • Labs 5.3.1 and 5.3.2
  • Lab 5.3.3 Automated Lookups in Security Incidents
BUY NOW

Prerequisites

Students should have attended the ServiceNow Fundamentals course. In addition, students should be familiar with the ServiceNow user interface, know how to manage lists, and know how to configure users, roles, and groups.

Follow-On Courses