Vendors

In this course, you will learn how to use FortiSIEM to search, enrich, and analyze events from customers in a managed security service provider (MSSP) organization. You will learn how to perform real-time and historical searches and build advanced queries. You will also learn how to perform analysis and remediation of security incidents.

img-course-overview.jpg

What You'll Learn

After completing this course, you should be able to:

  • Identify business drivers for using SIEM tools
  • Describe how FortiSIEM solves common cybersecurity challenges
  • Describe the main components and the unique database architecture on FortiSIEM
  • Perform real-time and historical searches
  • Define structured search operators and search conditions
  • Reference the CMDB data in structured searches
  • Add display fields and columns
  • Build queries from search results and events
  • Build nested queries and lookup tables
  • Build rule subpatterns and conditions
  • Identify critical interfaces and processes
  • Create rules using baselines
  • Analyze a profile report
  • Analyze anomalies against baselines
  • Analyze the different incident dashboard views
  • Refine and tune incidents
  • Clear an incident
  • Export an incident report
  • Create time-based and pattern-based clear conditions
  • Configure automation policies
  • Configure remediation scripts and actions
  • Differentiate between manual and automatic remediation
  • Configure notifications

Who Should Attend

Security professionals responsible for the detection, analysis, and remediation of security incidents using FortiSIEM should attend this course.

img-who-should-learn.png

Prerequisites

You must have an understanding of the topics covered in the following courses, or have equivalent experience:

  • FCF - FortiGate Fundamentals
  • FortiSIEM Administrator

Learning Journey

Coming Soon...

  • Introduction to FortiSIEM
  • Analytics
  • Nested Queries and Lookup Tables
  • Rules and Subpatterns
  • Performance Metrics and Baselines
  • Incidents
  • Clear Conditions and Remediation

Frequently Asked Questions (FAQs)

  • Why get Fortinet certified?

    Fortinet certifications validate your expertise in network security and your ability to implement and manage Fortinet's comprehensive Security Fabric.

    These certifications are highly valued by employers and demonstrate your commitment to staying ahead of the ever-evolving threat landscape.

    A Fortinet certification can open doors to new career opportunities, increase your earning potential, and make you a sought-after cybersecurity professional.

  • What to expect for the examination?

    Fortinet offers a variety of certification exams at different levels (NSE 1 - 8) and specializations (security, cloud, cybersecurity).

    Exams typically consist of multiple-choice and scenario-based questions that assess your knowledge and problem-solving skills in real-world security situations.

    Depending on the level and specialization, you will be required to pass/complete the core and/or elective exam(s), while the expert tier has written and practical exam.

    Note: Certification requirements and policies may be updated by Fortinet from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • How long is Fortinet certification valid for?

    As of 1 October 2023, all Fortinet certifications have an expiration date:

    NSE 1 - 4 (FCF, FCA, FCP, FCSS): Valid for two years.

    NSE 5 - 8 (FCX): Valid for three years.

    To maintain your certification, you must recertify before it expires. Recertification options include passing the same exam again or earning a higher-level certification.

    Note: Certification requirements and policies may be updated by Fortinet from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • Why take this course with Trainocate?

    Here’s what sets us apart:

    - Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 24 countries (and counting!).

    - Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.

    - Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.

    - Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.

    - Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.

    - Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Course Curriculum

Training Schedule

Training Schedule

Exam & Certification

Exam & Certification

FAQs

Frequently Asked Questions

img-improve-career.jpg

Improve yourself and your career by taking this course.

img-get-info.jpg

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name
Email
Phone
I'm inquiring for
Inquiry Details

By submitting this form, you consent to Trainocate processing your data to respond to your inquiry and provide you with relevant information about our training programs, including occasional emails with the latest news, exclusive events, and special offers.

You can unsubscribe from our marketing emails at any time. Our data handling practices are in accordance with our Privacy Policy.