Module 07 · Sare
SIEM, Log Analysis & Detection Engineering
SIEM, Log Analysis & Detection Engineering
Waxaad qori kartaa SIEM queries, samayn kartaa correlation rules, oo fahmi doontaa Sigma iyo tuning si loo yareeyo false positives.
6 cashar 1 saac 0/6 dhammaystiran
Casharrada
1SIEM Fundamentals & PipelineSIEM Fundamentals and Data PipelineBaro sida log-yada loo ururiyo, loo normalize gareeyo, alerts-na looga dhaliyo.11 daq2Writing Effective SIEM QueriesWriting Effective SIEM QueriesBaro sida loo qoro queries wax ku ool ah SIEM kala duwan (Splunk SPL, KQL).14 daq3Correlation Rules & Detection LogicCorrelation Rules and Detection LogicFaham sida correlation rules-ku u isku xiraan dhacdooyin kala duwan si loo helo alerts wax ku ool ah.12 daq4Sigma & Detection EngineeringSigma Rules and Detection EngineeringBaro Sigma — qaab-dhismeedka rules-ka guud ee la wadaagi karo SIEM kala duwan.10 daq5Alert Tuning & False Positive ReductionAlert Tuning and False Positive ReductionFaham sida rule-ka loo hagaajiyo si loo yareeyo alerts been ah, iyada oo aan la seegin threats dhab ah.13 daq6SIEM & Detection — Full Capstone LabSIEM and Detection Engineering Capstone LabKu dar dhammaan waxa aad baratay module-kan — naqshadee, qor, oo tuning garee detection rule dhamaystiran.15 daq