Cybersecurity Analyst - SIEM

Elastisearch, Discover, Rules and Dashboards
What you'll learn:
Elastic Discover and searching
Elastic Visualizations and Dashboards
Creating Elastic rules and Cases
Defining roles, users and spaces
Requirements:
None
Description:
Basics of Elastic. Starting from Discover. Looking at Rules and Cases, Visualizations and Dashboards.We start with the basics of Elastic Discover, using the KQL search and the fields to filter in and out parts of the documents.The visualizations made are added to a dashboard and saved for use later. Users and roles are made and amended as well as creating a new space with more limited access.We also talk about setting up rules, the rules shown are unfortunately not able to fire due to the setup that i am using, we are able to create a new one and modify a previously made one. WE then talk though the use of cases and how they can be used.Everything in this course is designed to help you use and become proficient in the use of Elastic at the basic level, it will also assist you in the certification exam. Practice makes perfect and the more you use Elastic the better you will get.This is by no means best practice but an insight on how i use Elastic to try and help you use it better.Please do leave feedback and criticism so i can improve and modify the course.
Who this course is for:
Beginners
Homepage