FortiSIEM

In this course, you will perform labs on FortiSIEM initial configurations, architecture, and the discovery of devices on the network. You will also perform labs on how to collect performance information and aggregate it with syslog data to enrich the overall view of the health of your environment, how to use the configuration database to greatly facilitate compliance audits, and how to integrate FortiSIEM into your network awareness infrastructure.

Course modules:

1. Introduction
2. SIEM and PAM Concepts
3. Discovery and FortiSIEM Agents
4. . FortiSIEM Analytics
5. CMDB Lookups and Filters
6. Group By and Data Aggregation
7. Rules and MITRE ATT&CK
8. Incidents and Notification Policies
9. Reports and Dashboards
10. Maintaining and Tuning
11. Troubleshooting

Duration: 2-days