ArcSight SIEM – A Step-by-Step BootCamp

Course Curriculum

Chapter 1: Security Information and Event Management (SIEM)

Lecture 1: What is SIEM?

Lecture 2: Micro Focus ArcSight SIEM – Part1

Lecture 3: Micro Focus ArcSight SIEM – Part2

Chapter 2: Micro Focus Security ArcSight ESM 101

Lecture 1: Get the Material

Lecture 2: About ArcSight ESM

Lecture 3: ArcSight ESM – ESM Enables Situational Awareness

Lecture 4: ArcSight ESM – ESM Anatomy

Lecture 5: ArcSight ESM – SmartConnectors – Part1

Lecture 6: ArcSight ESM – SmartConnectors – Part2

Lecture 7: ArcSight ESM – ArcSight Manager & CORR-EngineStorage

Lecture 8: ArcSight ESM – User Interfaces & Use Cases

Lecture 9: ArcSight ESM – Interactive Discovery & Pattern Discovery

Lecture 10: ArcSight ESM – ESM on an Appliance & Logger & ArcSight Solutions

Lecture 11: ArcSight ESM – About Resources

Lecture 12: Hands-ON – Getting The Software + ArcSight Console Simplified

Lecture 13: Hands-ON – SmartConnector Installation & ESM destination registeration – Part1

Lecture 14: Hands-ON – SmartConnector Installation & ESM destination registeration – Part2

Lecture 15: Hands-ON – SmartConnector Installation & ESM destination registeration – Part3

Lecture 16: Life Cycle of an Event Through ESM

Lecture 17: Data Collection and Event Processing – Collect & Normalize Event Data

Lecture 18: Data Collection and Event Processing – Apply Event Categories

Lecture 19: Hands-ON – Event Categorization Utility

Lecture 20: Data Collection and Event Processing – Look up Customer and Zone in Network Mode

Lecture 21: Data Collection and Event Processing – Filter/Aggregate/Managing SmartConnector

Lecture 22: Hands-ON – Filter and Aggregate Events

Lecture 23: Priority Evaluation and Network Model Lookup

Lecture 24: Workflow

Lecture 25: Correlation Evaluation – Correlation Overview & Filters & Rules

Lecture 26: Correlation Evaluation – How Rules Evaluated & Use Active/Session Lists

Lecture 27: Correlation Evaluation – Data Monitors – part1

Lecture 28: Correlation Evaluation – Data Monitors – part2

Lecture 29: Correlation Evaluation – Local and Global Variables & Velocity Templates

Lecture 30: Correlation Evaluation – Event Types

Chapter 3: Micro Focus ArcSight MarketPlace

Lecture 1: Brute Force Package From MarketPlace

Lecture 2: Sysmon Package From Micro Focus MarketPlace, Microsoft and GitHub

Chapter 4: ESM Installation

Lecture 1: Part1

Lecture 2: Part2

Lecture 3: Part3

Lecture 4: Part4

Chapter 5: Appendix A – ESM Console Demystified

Lecture 1: Micro Focus ArcSight ESM Console

Lecture 2: Connectors & Active Channels

Lecture 3: Filters & Field Sets

Chapter 6: Appendix B – ESM Administration

Lecture 1: Forgotten ESM Account Password and Disabled Account

Lecture 2: Fixing Time of Log Source

Lecture 3: ESM Console Connection Refused Error

Chapter 7: ArcSight Logger

Lecture 1: Microfocus ArcSight Logger Installation – part1

Lecture 2: Microfocus ArcSight Logger Installation – part2

Lecture 3: Microfocus ArcSight Logger Installation – part3

Lecture 4: Microfocus ArcSight Logger Installation – part4

Lecture 5: Microfocus ArcSight Logger GUI Demystified

Lecture 6: Ingesting Data in Logger and create Dashboards – part1

Lecture 7: Ingesting Data in Logger and create Dashboards – part2