Objectives
After completing these courses, you will be able to:
- Identify business drivers for using SIEM tools
- Describe SIEM and PAM concepts
- Describe key features of FortiSIEM
- Understand how collectors, workers, and supervisors work together
- Configure notifications
- Create new users and custom roles
- Describe the discovery process
- Enable devices for discovery
- Understand when to use agents
- Perform real-time, historic structured searches
- Group and aggregate search results
- Examine performance metrics
- Create custom incident rules
- Edit existing, or create new, reports
- Configure and customize the dashboards
- Export CMDB information
- Identify Windows Agent components
- Describe what Windows Agents are used for
- Understand how the Windows Agent Manager works in various deployment models
- Identify reports that relate to Windows Agents
- Understand FortiSIEM Linux File Monitoring Agent
- Understand agent registration
- Monitor agent communications after deployment