FortiAnalyzer Analyst

Kursun kodu

FA-An

Müddət

2 Gün, 11 Saat

PDF yüklə

Kursun təsviri

Məqsədlər

Tələblər

Kursun proqramı

Kursun təsviri

Course Description

In this course, you will gain the practical skills of a SOC analyst using FortiAnalyzer for centralized logging and analytics. You will learn how to examine and manage events, and automate threat response using event handlers and playbooks. You will also learn how to identify current and potential threats through incident analysis and outbreak reports. Finally, you will learn how to incorporate FortiAI in your workflow and generate security reports.

Product Versions

FortiAnalyzer 7.6

Certification

This course is intended to help you prepare for the Fortinet NSE 5 – FortiAnalyzer Analyst exam. This exam is part of the FCP Security Operations certification track.

Məqsədlər

Objectives

After completing this course, you should be able to:

Describe SOC objectives, responsibilities, and roles
Describe the role of FortiAnalyzer in a SOC
Describe FortiAnalyzer Security Fabric integration
Describe how logging works in a Security Fabric
Describe FortiAnalyzer Fabric deployments
Describe FortiAnalyzer operating modes
Describe how FortiAnalyzer parses and normalizes logs
Validate log parsers
Search logs using normalized fields
View and search for logs in the log view
Create saved filters and dashboards
View summary data in FortiView
View dashboards and widget features
Configure event handlers
Manage events
Configure indicators
Create incidents
Analyze incidents
Configure incident settings
Describe FortiAI operations and use cases
Describe threat hunting
Use the log count chart
Use the SIEM log analytics table
Describe outbreak alerts
Collect log volume statistics
Configure an automation stitch
Configure an event handler with an automation stitch enabled
Run and fine-tune predefined reports
Customize reports with macros, custom charts, and datasets
Configure external storage for reports
Group reports
Import and export reports and charts
Attach reports to incidents
Manage and troubleshoot reports
Create new playbooks
Use variables in tasks
Monitor playbooks
Export and import playbooks

Tələblər

Prerequisites

You must have an understanding of the topics covered in the following courses, or have equivalent experience:

FortiGate Operator
FortiAnalyzer Administrator

It is also recommended that you have knowledge of the following topic:

SQL SELECT statement syntax

Who Should Attend

Security professionals responsible for Fortinet Security Fabric analytics and automating tasks to detect and respond to cyberattacks using FortiAnalyzer should attend this course.

Kursun proqramı