Duration
3 days
Pre-requisites:
Basic Unix background
Basic Knowledge of Red Hat OpenShift
Course Outline
Day - 1
Session - 1
a. Intro to Cloud Pak for Security
b. Deployment Architecture
c. Hardware Requirements
d. OpenShift Overview
Session - 2
a. CP4S app installation
b. LDAP configuration
c. CP4S configuration
d. Data Source Config (QRadar)
Session - 3
a. CP4S app walkthrough
b. Roles
c. DE
d. Running queries
e. Federated queries
f. Visualise data
g. CASES
Day - 2
Session - 4
a. UBA
b. Threat Intelligence Insights
c. OO Box reports
d. TII Dashboards
Session - 5
a. SOAR
b. System Admin
c. Playbook Designer
Session - 6
a. Understanding OpenShift environment
b. System maintenance
c. Backup and Restore
d. Upgrading OpenShift and CP4S
e. Health Check
Day - 3
Session - 7 - QRadar Network Insights:
a. QRadar Network Insights overview and introduction
b. Basic understanding of QNI
c. Flow inspection levels
d. QRadar Network Insights appliance stacking
e. How to Configure Flow sources
Session - 8 - IBM QRadar Packet Capture:
a. IBM QRadar Packet Capture Overview & Introduction
b. What is QRadar Packet Capture & its capabilities
c. Standard PCAP File format
d. Understanding QRadar Packet Capture graphs
e. How Configuring pre-capture filter
Session - 9 - QRadar Incident Forensics:
a. QRadar Incident Forensics Overview & Introduction
b. QRIF Deployment Model
c. Architecture
d. Setup and Administration
e. Case Management
f. Suspected Content
g. Forensics Recovery
Programme scope, delivery arrangements and suitability are confirmed during enquiry.