Arcsight-SIEM

Perform labs on ArcSight Enterprise Security Management (ESM)  software solution that combines traditional security event monitoring with network intelligence, context correlation, anomaly detection, historical analysis tools, and automated remediation. ESM is a multi-level solution that provides tools for network security analysts, system administrators, and business users.

Course modules:

1. ArcSight ESM
2. ArcSight Enterprise Security Management
3. Life Cycle of an Event Through ESM
4. Data Collection and Event Processing
5. Priority Evaluation and Network Model Lookup
6. Workflow
7. Correlation Evaluation
8. Monitoring and Investigation
9. Reporting and Incident Analysis
10. CORR-Engine
11. The Event Schema
12. The Network Model
13. The Actor Model
14. Managing Resources and Standard Content

Duration: 2-days