Skip to Scheduled Dates
Course Overview
According to IBM’s 2023 Cost of a Data Breach Report, the average data breach now costs $4.45 million. The ability to detect and respond to threats quickly is no longer optional—it’s essential. The FortiAnalyzer Analyst training course equips cybersecurity professionals with the tools to centralize logging, perform real-time threat analysis, and automate response tasks across the Fortinet Security Fabric.
Through a mix of lecture and hands-on labs, you’ll learn how to investigate incidents, generate actionable reports, and create automated playbooks. This one-day course prepares you for the FCP - FortiAnalyzer 7.4 Analyst certification exam and builds critical skills for SOC analysts and security engineers working to reduce breach impact and accelerate response time.
Who Should Attend
Anyone who is responsible for Fortinet Security Fabric analytics and automating tasks to detect and respond to cyberattacks using FortiAnalyzer should attend this course.
Course Objectives
This course builds foundational knowledge for those analyzing and responding to security incidents in a Fortinet-powered environment. Participants will learn to manage logs, generate actionable reports, configure incidents, and build automated playbooks.
You’ll gain practical skills to:
- Understand FortiAnalyzer core features and functions
- Search, view, and interpret logs using Log View and FortiView
- Manage SOC features including events, handlers, and incidents
- Perform basic threat hunting tasks and analyze outbreak alerts
- Customize datasets and create detailed reports
- Build and monitor automated playbooks for security tasks
Course Outline
Introduction and Initial Access
- Overview of FortiAnalyzer functions
- Access methods and navigation
- Device registration
Logging
- Collecting and storing logs
- Log View and FortiView tools
- Log filtering and analysis
Incidents and Events
- Understanding events and event handlers
- Incident creation and configuration
- Threat hunting and outbreak alerts
Reports
- Report creation and customization
- Managing datasets and charts
- Troubleshooting and attaching reports to incidents
Playbooks
- Playbook concepts and use cases
- Creating, monitoring, and automating tasks
- Integrating playbooks into workflows