SIEM Training

siem_training.md

SIEM Training

General

• Jose Bravo - What is a SIEM? (5 Vídeos): https://www.youtube.com/watch?v=MtqFMe4zSpQ&list=PLHh9jhztlMyp8lyKXt9orVM57ygW_ihPS
• IPPSec - PowerSIEM Analyzing Sysmon Events with PowerShell: https://www.youtube.com/watch?v=MvfhIydxFmw

AlienVault OSSIM

• Cybrary - AlienVault OSSIM: https://www.cybrary.it/course/alienvault-ossim/

Elastic

• Elastic - SIEM Fundamentals: https://www.elastic.co/training/elastic-security-fundamentals-siem

ArcSight (2 séries/paylists de vídeos)

• Paul Brettle - What is Series: https://youtube.com/playlist?list=PL_JhopV-r9zLigctFEOzic-af0sEuHZ-x
• Paul Brettle - ArcSight ESM 101: https://youtube.com/playlist?list=PL_JhopV-r9zIXDz0pX2dmSJvBGVkczF5y

QRadar

• Jose Bravo - QRadar (38 Vídeos): https://www.youtube.com/watch?v=P90e4iEJ32s&

Splunk

• Splunk - What is Splunk?: https://education.splunk.com/course/what-is-splunk
• Splunk - Intro to Splunk: https://education.splunk.com/course/intro-to-splunk-elearning
• Splunk - Using Fields: https://education.splunk.com/course/using-fields
• Splunk - Scheduling Reports & Alerts: https://education.splunk.com/course/scheduling-reports-alerts-elearning
• Splunk - Visualizations: https://education.splunk.com/course/visualizations-elearning
• Splunk - Search Under the Hood: https://education.splunk.com/course/search-under-the-hood-elearning
• Splunk - Intro to Knowledge Objects: https://education.splunk.com/course/intro-to-knowledge-objects-elearning
• Splunk - Intro to Dashboards: https://education.splunk.com/course/intro-to-dashboards-eLearning