In this three-day course, you will learn how to use FortiSIEM in a multi-tenent environment. You will learn about rules and their architecture, how incidents are generated, how baseline calculations are performed, the different methods of remediation available, and how the nested queries and lookup tables work for advanced analytics using FortiSIEM. You will also learn how to integrate FortiSOAR with FortiSIEM.

Agenda:
1. Introduction to Multi-Tenancy
2. Defining FortiSIEM Collectors and FortiSOAR Collectors
3. Operating Collectors
4. Windows and Linux Agents
5. Rules
6. Single Subpattern Security Rules
7. Multiple Subpattern Rules
8. Baselines
9. Baseline Rules
10. FortiSIEM UEBA
11. Nested Queries and Lookup Tables
12.Clear Conditions
13. Remediation

This kit helps you prepare for the NSE 7 certification exam. It includes:
• Advanced Analytics 6.7 Study Guide
• Advanced Analytics 6.7 Lab Guide (It does not include access to the lab environment. Lab time must be purchased separately.)

Click here to go to the exam voucher purchase page.

For the status of FCSS - Security Operations exams at Pearson VUE, see https://training.fortinet.com/local/staticpage/view.php?page=fcss_security_operations