Architecture Introduction + Basic Woekflow Architecture + Event Collector Architecture + QRadar Architecture Deep Dive

Perform Machine Snapshot

Apply CE Log Ingestion Patch + DSM Dependency + Install and upgrade DSM + Perform DSM Assignment

Prepare Detections on Linux Logs + Patching Wincollect + Create Wincollect Managed User + IBM App Exchange + Advanced Detections with Sysmon + Anomaly Detection and Reference Set + Extract Logs for Detection

UCM and MITRE

Manage your admin jobs

Persistence Attack - Part 2 + Privilege Escalation via UAC Bypass

QRadar on AWS - Part 1 + QRadar on AWS - Part 2 + Apply FixPack to QRadar on AWS + Threat Intel Integration

What are we doing here

QRadar Usecase for Practice

Assessment Instruction