Overview
Curriculum
- 4 Sections
- 71 Lessons
- 130 Minutes
Expand all sectionsCollapse all sections
- 01. Introduction and Initial Configuration9
- 02. Logging23
- 2.1Insert Rate vs Recieve Rate
- 2.2Using information on Widget
- 2.3Retrieveing Archived Logs
- 2.4Log Fetching
- 2.5Fabric View
- 2.6Asset Center
- 2.7Identiy Center
- 2.8FortiView
- 2.9Application Logs
- 2.10Gathering LogRate and Device Usage Stats
- 2.11Troubleshooting and Managing Logs
- 2.12Monitors Pane
- 2.13IOC Compromised host
- 2.14Indicators of Compromise
- 2.15Using Information on a Widget
- 2.16Saving Frequent Searches
- 2.17Searching
- 2.18Summary DashBoard
- 2.19LogView
- 2.20LogFile WorkFlow
- 2.21Log Type by Device
- 2.22Log Storage Regulations
- 2.23Purpose of Logging
- 03. FortiSoC—Incidents and Events25
- 3.1Analyzing an Incident
- 3.2Creating an Incident
- 3.3Playbook Dashboards
- 3.4Events Generated
- 3.5Managing Event Handlers
- 3.6Matching Filters
- 3.7Generic Text Filters
- 3.8Event Details
- 3.9Event Notifications
- 3.10Event Status
- 3.11Exporting and Importing Event Handlers
- 3.12Managing Events
- 3.13Managing Incidents
- 3.14Events Dashboards
- 3.15Incident Dashboards
- 3.16Management Extensions
- 3.17Dashboards
- 3.18FortiSoc Features
- 3.19Outbreak Detection Service OverView
- 3.20Threat Hunting Example
- 3.21Threat Huntinglog Count Chart
- 3.22SIEM Log Analytics Table
- 3.23Configuring Incident Settings
- 3.24Editing an Incident
- 3.25Analyzing an Incident
- 04. FortiSoC—Playbooks14
- 4.1Importing Playbooks
- 4.2Monitoring Playbooks
- 4.3Using Variable in Tasks
- 4.4Managing Playbooks
- 4.5Creating a New Playbook
- 4.6Customizing Playbooks Settings
- 4.7Creating Playbook from Template
- 4.8Tasks
- 4.9Connectors
- 4.10Playbook Concepts
- 4.11Triggers
- 4.12Example Automation
- 4.13Why Automation
- 4.14Playbook Components
Instructor
