HP ArcSight ESM Security Administration Training
Introduction to HP ArcSight ESM
Gain an understanding of HP ArcSight ESM (Enterprise Security Manager), a comprehensive security information and event management (SIEM) solution. Learn about its core functionalities, benefits, and role in enterprise security management.
Getting Started with ArcSight ESM
Learn how to set up and configure HP ArcSight ESM. Understand the installation process, initial configuration, and how to navigate the ArcSight ESM interface to manage security events and incidents.
ArcSight ESM Architecture and Components
Explore the architecture and key components of HP ArcSight ESM, including the ESM server, databases, and user interface. Understand how these components interact to provide a comprehensive security management solution.
Event Collection and Management
Discover how to collect and manage security events using HP ArcSight ESM. Learn about event sources, data collection methods, and how to configure event parsers and connectors to integrate with various security devices.
Rules and Correlation
Learn how to create and manage rules and correlation directives in ArcSight ESM. Understand how to define correlation rules to detect and respond to security threats and incidents effectively.
Incident Management
Explore the incident management capabilities of HP ArcSight ESM. Learn how to create, track, and manage security incidents, and how to use the incident management features to streamline response and resolution processes.
Dashboards and Reporting
Learn how to create and customize dashboards and reports in ArcSight ESM. Understand how to use reporting tools to generate insights, track security metrics, and present data effectively to stakeholders.
Security Monitoring and Alerts
Discover how to monitor security events and set up alerts in HP ArcSight ESM. Learn how to configure alert thresholds, manage alert notifications, and ensure timely responses to potential security incidents.
Integration with Other Security Tools
Explore how to integrate ArcSight ESM with other security tools and systems. Learn about integration options, data exchange methods, and how to enhance the effectiveness of your security operations through integration.
Best Practices for Security Administration
Discover best practices for managing and administering HP ArcSight ESM. Learn tips and techniques for optimizing performance, ensuring security, and maintaining effective security operations.
Hands-On Labs and Projects
Engage in hands-on labs and projects to apply your knowledge of HP ArcSight ESM. Work on real-world scenarios to develop practical skills in configuring, managing, and optimizing ArcSight ESM for enterprise security.
HP ArcSight ESM Security Administration syllabus
Introduction to HP ArcSight ESM 6.5
- Overview of HP ArcSight ESM 6.5
- Architecture and Features
- User Interface and Navigation
Installing and Configuring ArcSight ESM
- Preparing for Installation
- Installation Steps
- Configuring ArcSight ESM
ArcSight ESM Architecture and Data Flow
- Understanding the ArcSight ESM Architecture
- Data Flow in ArcSight ESM
- Data Management and Storage
ArcSight ESM Management Center
- Introduction to ArcSight ESM Management Center
- User Management and Roles
- System Maintenance and Monitoring
Managing Event Data and Data Sources
- Configuring Data Sources
- Managing Event Data
- Normalizing and Enriching Data
ArcSight ESM Rules and Filters
- Creating and Managing Rules
- Filters and Conditions
- Using Active Lists
Advanced Correlation and Analysis
- Correlation Concepts and Techniques
- Creating and Managing Correlation Rules
- Using the ArcSight Console for Analysis
ArcSight ESM Reporting
- Understanding Reporting in ArcSight ESM
- Creating and Customizing Reports
- Scheduling and Exporting Reports
User and Role Management
- Managing Users and Groups
- Managing Roles and Permissions
- LDAP and Active Directory Integration
ArcSight ESM Administration and Troubleshooting
- Troubleshooting ArcSight ESM
- Performance Optimization
- Configuring Event Storage and Retention
Backing Up and Restoring ArcSight ESM
- ArcSight ESM Backup and Restore Procedures
- Disaster Recovery Planning
ArcSight ESM Patching and Upgrades
- Patching and Upgrading ArcSight ESM
- Best Practices for Upgrades and Migrations
Training
Basic Level Training
Duration : 1 Month
Advanced Level Training
Duration : 1 Month
Project Level Training
Duration : 1 Month
Total Training Period
Duration : 3 Months
Course Mode :
Available Online / Offline
Course Fees :
Please contact the office for details