Skip to Scheduled Dates
Course Overview
This four-day instructor-led training enabled you deploy and manage Cortex XSIAM to collect and ingest various data sources, logs and alerts, to drive machine learning for natively autonomous response actions, such as cross-correlation of alerts and data, detection of highly sophisticated threats, and automated remediation based on native threat intelligence and attack surface data.
Who Should Attend
SOC/CERT/CSIRT/XSIAM engineers, MSSPs and service delivery partners/system integrators, professional-services consultants, and sales engineers, both internal and external, SOC managers, IR, and hunt team members.
Course Objectives
- Deploy and manage Cortex XSIAM
- Collect and ingest various data sources
- Drive machine learning for natively autonomous response actions
- Detect highly sophisticated threats
- Create auto-remediation responses
Course Outline
- Introduction to Cortex XSIAM
- Elements of Security Operations
- Maturity Model
- Agent Deployment and Configuration
- Data Source Ingestion
- Visibility
- Data Model
- Analytics
- Alerting and Detecting
- Attack Surface Management
- Automation
- Incident Handling / SOC