IBM QRadar SIEM Advanced Topics

Course overview

Can you use IBM QRadar SIEM to correlate various events and flow and trigger alerts of suspicious events? Learn to process uncommon QRadar events, work with reference data, custom rules and actions.

This course is designed and built on IBM Security® QRadar® 7.4.3. and QRadar 7.5.0. The lab is built on QRadar 7.5.0 update 8.

What you learn:

• Create custom log sources

• Work with reference data collections and custom rules

• Use X-Force data and Threat Intelligence app

• Use the Use Case Manager app

• Use User Behavior Analytics (UBA) and QRadar Advisor

• Discover and perform tuning

• Explore custom action scripts

• Integrate QRadar with IBM SOAR

Skills you gain:

• Threat investigation

• QRadar data searching

• QRadar X-Force integration

• QRadar incident response

Who should attend

This course is designed for security administrators and security analysts.

Prerequisites

Students should be knowledgeable about the following topics: • IT infrastructure • IT security fundamentals • Linux • Windows • TCP/IP networking • Syslog • Foundational skills for the IBM QRadar Security Intelligence Platform (at least the skills that are taught in the IBM QRadar SIEM Foundations - BQ104 course)

Delivery formats

• • Instructor-led online (virtual classroom)
• • Instructor-led on-site at your premises
• • Self-paced online training
• • Private/closed group delivery for corporate teams

Digital badge

Delegates completing this course are eligible for an IBM digital badge, issued via Credly. View the badge

Related and follow-on courses

• BQ105G — IBM QRadar SIEM Foundations (Intermediate)
• BQ310G — QRadar SIEM: Gathering Threat Management Data (v7.5) (Intermediate)
• BQ505G — QRadar EDR: Foundations (Basic)
• BQ510XG — QRadar EDR: Protecting Your Endpoints (Intermediate)