-: In this section of the course, we're going to cover SIEMs 2 2
which are the security information 3 3
and event management systems. 4 4
Now we're going to continue to focus 5 5
on domain one, security operations, with a focus 6 6
on objectives 1.1 and 1.3 during this section. 7 7
Objective 1.1 states 8 8
that you must be able to explain the importance 9 9
of system and network architecture concepts 10 10
in security operations. 11 11
And objective 1.3 states that given a scenario, 12 12
you must analyze data 13 13
as part of your security monitoring activities. 14 14
Now in particular, we're going to be focused 15 15
on security monitoring activities that are associated 16 16
with SIEMs which makes sense 17 17
because this is the SIEM section of the course. 18 18
Now, as we begin to move through the section, 19 19
we're going to start out by describing a security information 20 20
and event management system or SIEM and how it's used 21 21
within your network to increase your monitoring 22 22
and detection capabilities. 23 23
Then we're going to explore the various use cases 24 24
for security data collection techniques that are available 25 25
for us to use as cybersecurity analysts. 26 26
Next, we're going to focus on the importance 27 27
of security data normalization inside of your network 28 28
before we move into our event logs and syslogs 29 29
as we begin to analyze various security incidents. 30 30
After that, 31 31
I'm going to be performing another hands-on demonstration 32 32
and this time I'm going to be showing you 33 33
how to configure a SIEM agent to collect data 34 34
from across your network 35 35
and bring it back into a central repository. 36 36
Remember, a SIEM is an essential part 37 37
of detecting malicious activity inside of your networks 38 38
so you won't want to miss this section of the course. 39 39
It is really, really important. 40 40
Now finally, we're going to take a short quiz 41 41
to see what you learned during this section of the course 42 42
and review each of those quiz questions fully 43 43
to ensure you can explain why the right answers were right. 44 44
So let's start exploring the world of security information 45 45
and event management systems in this section of the course.