What You Need to Know Before
You Start

Starts 3 June 2025 08:14

Ends 3 June 2025

00 days
00 hours
00 minutes
00 seconds
course image

Fortinet FortiSIEM - A Step-by-Step BootCamp

Tackle cyber threats in real time by using powerful, scalable, and efficient SIEM security software. That’s FortiSIEM.
via Udemy

4052 Courses


11 hours 10 minutes

Optional upgrade avallable

Not Specified

Progress at your own speed

Paid Course

Optional upgrade avallable

Overview

Tackle cyber threats in real time by using powerful, scalable, and efficient SIEM security software. That’s FortiSIEM.

What you'll learn:

Security Information and Event ManagementSIEMFortinet FortiSIEMHands-ONUse Cases Do you want to enter the SIEM field? Do you want to learn one of the leaders SIEM technologies?

Do you want to understand the concepts and gain the handson on Fortinet FortiSIEM? Then this course is designed for you.

Through baby steps you will learn Fortinet FortiSIEM FortiSIEM is a highly scalable multi-tenant Security Information and Event Management (SIEM) solution that provides real time infrastructure and user awareness for threat detection, analysis and reporting. FortiSIEM provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government.

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detectionAlleviating compliance mandate concerns for PCI, HIPAA and SOXManaging “alert overload”Handling the “too many tools” reporting issueDetect unusual user and entity behavior (UEBA) without requiring the Administrator to write complex rules.Addressing the MSPs/MSSPs pain of meeting service level agreementsFortinet FortiSIEM was previously known as FortiSIEM, AccelOps.The course is covering below topics- Introduction- Foundations and Reference Architecture- Scale-Out Architecture- Distributed Event Correlation- Clustering Architecture- Licensing- High Availability and Disaster Recovery - ClickHouse- FortiSIEM Sizing - ClickHouse- All-In-One Supervisor Installation- FortiCollector Installation & Registeration- FSM GUI simplified- Windows Agent Installation, Registeration and Template Association- Search via Analytics page- Incidents, Rules Development and Troubleshooting- Sysmon Log Integration into FortiSIEM- Sigma Rules and Sysmon Rule Development- Command Line_Powershell Auditing and Sigma Rule Translation- Attack Scenario, File Integrity Monitoring and Linux Agent Installation- Dashboards and Business Services- Reports- Device Discovery - FortiGate - SNMP, SSH, SYSLOG, and NETFLOW- Discovery Settings, CMDBGroups, Business Services and Custom Properties- Upload New License File- NFS Archive and Retention Policy- Validate and Search Archives- ClickHouse Warm Tier disk addition to Extend Online Retention- Splitting Data & Control Planes - Adding Network Interface to FortiSIEM- Deep Dive on FortiSIEM Licensing and Part Numbers

Syllabus

  • Introduction to SIEM
  • What is SIEM?
    Overview of the SIEM Industry
  • Introduction to Fortinet FortiSIEM
  • Key Features of FortiSIEM
    FortiSIEM Architecture Overview
  • Installation and Setup
  • System Requirements
    Deployment Options
    Initial Configuration Steps
  • Data Ingestion and Parsing
  • Event Collection Methods
    Configuring Connectors and Parsers
  • Monitoring and Alerting
  • Real-time Monitoring
    Setting Up Alerts and Notifications
  • Incident Response
  • Investigating and Managing Incidents
    Automating Response Actions
  • Reporting and Analytics
  • Creating Custom Reports
    Leveraging Analytics for Insight
  • FortiSIEM Best Practices
  • Performance Optimization
    Scalability Tips
  • Case Studies and Use Cases
  • Real-world FortiSIEM Applications
    Success Stories
  • Course Wrap-Up
  • Review of Key Concepts
    Q&A Session

Taught by

Hatem Metwally


Subjects

Information Security (InfoSec)