LogRhythm Central Administration – Novice to Professional
Complete step by step Core Administration tasks of daily operations
3.85 (26 reviews)
110
students
5.5 hours
content
Mar 2023
last update
$79.99
regular price
What you will learn
1 - Course Introduction. Use Code A1C28A93AE33240A5CCA to get discount
2 - LogRhythm Architecture Overview
2.1 - What Is LogRhythm SIEM?
2.2 - LogRhythm Components Overview.
2.3 - LogRhythm Workflow and Log Life.
3 - LogRhythm Data Management
3.1 - LogRhythm Classifications.
3.2 - LogRhythm Common Events and Metadata.
3.3 - LogRhythm Data Storage Architecture.
4 - Client Console and Web Console Overview
4.1 - Walkthrough of Client Console.
4.2 - Walkthrough of Web Console.
5 - Entities Management
5.1 - Entity Overview and Entity Creation.
5.2 - Network Record Creation and Management
5.3 - Host Record Creation and Management.
6 - List Management
6.1 - List Overview and List Permissions.
6.2 - List Creation.
6.3 - Retiring and Expiring List.
7 - Knowledge Base Management
7.1 - Knowledge Base Overview.
7.2 - Understanding and Enabling KB Modules.
8 - User's Profiles
8.1 - User Records & Profile Management.
8.2 - User and Profile Creation.
8.3 - User Security, Person and Role records.
8.4 - Entities & Permission.
8.5 - Types of User Ownership
9 - System Settings
9.1 - Global Risk Base Priority and RBP Calculator.
9.2 - Global Settings and Data management.
9.3 - Active Directory Synchronization.
9.4 - LogRhythm True Identity for Active Directory.
9.5 - Component Log Levels.
9.6 - Service accounts and Archive Path.
10 - Data Masking
10.1 - Data Masking Overview.
10.2 - Scenarios to Apply Data Masking.
10.3 - How to Apply Data Masking.
11 - Global Log Processing Rules
11.1 - GLPR Overview.
11.2 - Scenarios to Apply GLPR.
11.3 - How to create GLPR.
12 - Client Console Investigation
12.1 - Searching Logs in Client Console.
12.2 - How to Create Graph in Investigation.
12.3 - Search Realtime Logs with tail.
12.4 - Personal Dashboard in Client Console
13 - Report Center
13.1 - Report Template Creation.
13.2 - Report Types and creation.
13.3 - Report Package Creation.
13.4 - Schedule Report Package in Report Manager.
13.5 - LogRhythm Reporting with Grafana.
14 - Second Look Wizard
14.1 - Second Look Overview.
14.2 - Restore Logs with Second Look Wizard.
14.3 - LogRhythm Archive Utility.
15 - System Monitor
15.1 - System Monitor Types.
15.2 - Deployment of System Monitor Agent.
15.3 - Advance Configuration of System Monitor
15.4 - Smart Response Initiation from System Monitor
16 - Log Sources
16.1 - Default Supported Log Sources Overview
16.2 - Log Source Integration and Configuration.
16.3 - Bulk Log Source Adding.
16.4 - Log Source Virtualization.
17 - Advance Intelligence Engine
17.1 - AIE Overview and Common Configuration.
17.2 - Types of Rule Blocks.
17.3 - Use Case Creation.
17.4 - Adding Smart Response in AIE Use Case.
18 - Alarm Rules
18.1 - Alarm Rules Overview.
18.2 - Difference between AIE Rules and Alarm Rules.
18.3 - Enabling the Alarm rules.
19 - Custom Dashboard Creation
19.1 - Step-by-Step Custom dashboard creation.
19.2 - Widget types and tuning.
19.3 - Lucene Search to filter data in Dashboard.
20 - Alarm Management
20.1 - Alarm Grid View.
20.2 - Handling Alarms with Status.
20.3 - Link Multiple Alarms.
21 - Case Management
21.1 - Case Creation and Collaboration.
21.2 - Adding Evidences in Case.
21.3 - Case priority, status and workflow.
21.4 - Case Resolution
22 - Database Management
22.1 - How to create database backup job.
22.2 - How to create database cleanup job.
23 - Threat Intelligence
23.1 - Installation and Overview of Threat Intelligence.
23.2 - Enabling Threat Modules.
23.3 - Associate modules with Lists.
24 - Configuration Assessment and Health Check
24.1 - Integrated Log sources Assessment and Health Check.
24.2 - MPE Rules Assessment and Health Check.
24.3 - AIE Rules Assessment and Health Check.
24.4 - LogRhythm Diagnostic tool.
Screenshots
Related Topics
4922794
udemy ID
10/11/2022
course created date
5/26/2024
course indexed date
Bot
course submited by