Fortinet FortiSIEM A Step-by-Step BootCamp

Fortinet FortiSIEM – A Step-by-Step BootCamp, available at $74.99, has an average rating of 4.09, with 26 lectures, based on 114 reviews, and has 1869 subscribers.

You will learn about Security Information and Event Management SIEM Fortinet FortiSIEM Hands-ON Use Cases This course is ideal for individuals who are Network Security Specialists & Administrators or SOC Operators & Analysts or Information Security Sepcialists It is particularly useful for Network Security Specialists & Administrators or SOC Operators & Analysts or Information Security Sepcialists.

Enroll now: Fortinet FortiSIEM – A Step-by-Step BootCamp

Summary

Title: Fortinet FortiSIEM – A Step-by-Step BootCamp

Price: $74.99

Average Rating: 4.09

Number of Lectures: 26

Number of Published Lectures: 26

Number of Curriculum Items: 26

Number of Published Curriculum Objects: 26

Original Price: $19.99

Quality Status: approved

Status: Live

What You Will Learn

Security Information and Event Management

SIEM

Fortinet FortiSIEM

Hands-ON

Use Cases

Who Should Attend

Network Security Specialists & Administrators

SOC Operators & Analysts

Information Security Sepcialists

Target Audiences

Network Security Specialists & Administrators

SOC Operators & Analysts

Information Security Sepcialists

Do you want to enter the SIEM field?

Do you want to learn one of the leaders SIEM technologies?   

Do you want to understand the concepts and gain the handson on Fortinet FortiSIEM?   

Then this course is designed for you. Through baby steps you will learn Fortinet FortiSIEM 

FortiSIEM is a highly scalable multi-tenant Security Information and Event Management (SIEM) solution that provides real time infrastructure and user awareness for threat detection, analysis and reporting.

FortiSIEM provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government.

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection

Alleviating compliance mandate concerns for PCI, HIPAA and SOX

Managing “alert overload”

Handling the “too many tools” reporting issue

Detect unusual user and entity behavior (UEBA) without requiring the Administrator to write complex rules.

Addressing the MSPs/MSSPs pain of meeting service level agreements

Fortinet FortiSIEM was previously known as FortiSIEM, AccelOps.

The course is covering below topics

– Introduction

– Foundations and Reference Architecture

– Scale-Out Architecture

– Distributed Event Correlation

– Clustering Architecture

– Licensing

– High Availability and Disaster Recovery – ClickHouse

– FortiSIEM Sizing – ClickHouse

– All-In-One Supervisor Installation

– FortiCollector Installation & Registeration

– FSM GUI simplified

– Windows Agent Installation, Registeration and Template Association

– Search via Analytics page

– Incidents, Rules Development and Troubleshooting

– Sysmon Log Integration into FortiSIEM

– Sigma Rules and Sysmon Rule Development

– Command Line_Powershell Auditing and Sigma Rule Translation

– Attack Scenario, File Integrity Monitoring and Linux Agent Installation

– Dashboards and Business Services

– Reports

– Device Discovery – FortiGate – SNMP, SSH, SYSLOG, and NETFLOW

– Discovery Settings, CMDB Groups, Business Services and Custom Properties

– Upload New License File

– NFS Archive and Retention Policy

– Validate and Search Archives

– ClickHouse Warm Tier disk addition to Extend Online Retention

– Splitting Data & Control Planes – Adding Network Interface to FortiSIEM

– Deep Dive on FortiSIEM Licensing and Part Numbers

Course Curriculum

Chapter 1: Core

Lecture 1: Introduction

Lecture 2: Foundations and Reference Architectures

Lecture 3: FortiSIEM Sizing – ClickHouse

Lecture 4: High Availability and Disaster Recovery – ClickHouse

Lecture 5: Supervisor All-In-One Installation

Lecture 6: FortiCollector Installation & Registeration

Lecture 7: FSM GUI simplified

Lecture 8: Windows Agent Installation & Registeration

Lecture 9: Search via Analytics page

Lecture 10: Incidents, Rules Development and Troubleshooting

Lecture 11: Sysmon Log Integration into FortiSIEM

Lecture 12: Sigma Rules and Sysmon Rule Development

Lecture 13: Command Line_Powershell Auditing and Sigma Rule Translation

Lecture 14: Attack Simulation, File Integrity Monitoring and Linux Agent Installation

Chapter 2: Device Discovery

Lecture 1: SNMP

Lecture 2: SSH

Lecture 3: SYSLOG

Lecture 4: NETFLOW, Discovery Settings, CMDB Groups, Business SRV, and Custom Properties

Chapter 3: Dashboards, Business Services and Reports

Lecture 1: Dashboards and Business Services

Lecture 2: Reports

Chapter 4: Appendix

Lecture 1: Upload New License File

Lecture 2: NFS Archive and Retention Policy

Lecture 3: Validate and Search Archives

Lecture 4: ClickHouse Warm Tier disk addition to Extend Online Retention

Lecture 5: Splitting Data & Control Planes – Adding Network Interface to FortiSIEM

Lecture 6: Deep Dive on FortiSIEM Licensing and Part Numbers

Instructors

Hatem Metwally
Senior Security Consultant

Rating Distribution

1 stars: 1 votes

2 stars: 1 votes

3 stars: 9 votes

4 stars: 42 votes

5 stars: 61 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!