3-7304 - ArcSight ESM Administrator and Analyst (version 24.1)
- Code training 7304
- Duur 5 dagen
Andere trainingsmethoden
Ga naar:
Methode
Deze training is in de volgende formats beschikbaar:
-
Klassikale training
Klassikaal leren
-
Virtueel leren
Virtueel leren
Vraag deze training aan in een andere lesvorm.
Trainingsbeschrijving
Naar bovenThis five-day,instructor-led course teaches you how to use the ArcSight console and ArcSight Command Center to monitor security events,configure ESM,manage users,and manage ESM network intelligence resources. You will also be introduced to triaging and resolving cases with ArcSight SOAR.
Data
Naar boven-
- Methode: Virtueel leren
- Datum: 12-16 januari, 2026 | 09:00 to 17:00
- Locatie: Virtueel-en-klassikaal (W. Europe )
- Taal: Nederlands
-
- Methode: Virtueel leren
- Datum: 08-12 juni, 2026 | 09:00 to 17:00
- Locatie: Virtueel-en-klassikaal (W. Europe )
- Taal: Nederlands
-
- Methode: Virtueel leren
- Datum: 07-11 december, 2026 | 09:00 to 17:00
- Locatie: Virtueel-en-klassikaal (W. Europe )
- Taal: Nederlands
Doelgroep
Naar bovenThis course is intended for Analyst,Administrator,Business Administrator
Trainingsdoelstellingen
Naar bovenOn completion of this course,you should be able to:
- Make ArcSight ESM operational upon initial installation.
- Describe how ESM works in the context of your network.
- Create user accounts.
- Implement built-in content.
- Populate ESM with your network and assets to identify endpoints involved in an event.
- Create site-specific business-oriented views.
- Investigate,identify,analyze,and remediate exposed security issues.
- Use workflow management to provide real-time incident response and escalation tracking.
- Modify and run standard reports to provide situational awareness and network status.
- Establish ESM peering across multiple ESM instances.
- Perform distributed event search and content management.
Inhoud training
Naar bovenHighlights:
- Investigate security events
- Configure security content
Voorkennis
Naar bovenNone