SIEM – Advanced Exploitation of Security Logs and Threat Detection

Training objective: Learn to design, operate, and optimize a SIEM solution to detect threats, correlate events at scale, build useful dashboards, create relevant alerts, and identify abnormal behaviors across networks, systems, and cloud environments.

• Design a coherent and scalable SIEM architecture
• Select, collect, and normalize the right logs
• Transform raw logs into actionable insights
• Define relevant alert rules and effective dashboards
• Detect anomalies based on behavioral baselines
• Integrate cloud logs, containers, and automate certain tasks
• Evaluate the effectiveness of security controls through logs