When will I have access to the lectures and assignments?

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

What will I get if I subscribe to this Specialization?

When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Network Traffic and Logs Using IDS and SIEM Tools

kurs ist nicht verfügbar in Deutsch (Deutschland)

Wir übersetzen es in weitere Sprachen. Sehen Sie sich die Sprachen an, die wir anbieten.

Network Traffic and Logs Using IDS and SIEM Tools

Dieser Kurs ist Teil von Spezialisierung „Google Network Security“

Dozent: Google Career Certificates

1.567 bereits angemeldet

Bei enthalten

Mehr erfahren

4 Module

Verschaffen Sie sich einen Einblick in ein Thema und lernen Sie die Grundlagen.

26 Bewertungen

Stufe Anfänger

Empfohlene Erfahrung

4 Stunden zu vervollständigen

Flexibler Zeitplan

In Ihrem eigenen Lerntempo lernen

4 Module

Verschaffen Sie sich einen Einblick in ein Thema und lernen Sie die Grundlagen.

26 Bewertungen

Stufe Anfänger

Empfohlene Erfahrung

4 Stunden zu vervollständigen

Flexibler Zeitplan

In Ihrem eigenen Lerntempo lernen

Was Sie lernen werden

Understand basic syntax, components of signatures and logs in Intrusion Detection Systems (IDS) and Network Intrusion Detection Systems (NIDS) tools
Perform queries in Security Information and Event Management (SIEM) tools to investigate an event
Determine how to read and analyze logs during incident investigation
Describe how common intrusion detection system (IDS) tools provide security value

Kompetenzen, die Sie erwerben

Kategorie: Anomaly Detection
Kategorie: Computer Security Incident Management
Kategorie: Network Analysis

Werkzeuge, die Sie lernen werden

Kategorie: JSON

Wichtige Details

Zertifikat zur Vorlage

Zu Ihrem LinkedIn-Profil hinzufügen

Bewertungen

5 Aufgaben

Unterrichtet in Englisch

91%

of learners achieved a positive career outcome

Erfahren Sie, wie Mitarbeiter führender Unternehmen gefragte Kompetenzen erwerben.

Weitere Informationen zu Coursera für Unternehmen

Logos von Petrobras, TATA, Danone, Capgemini, P&G und L'Oreal

Erweitern Sie Ihre Fachkenntnisse

Dieser Kurs ist Teil der Spezialisierung Spezialisierung „Google Network Security“

Wenn Sie sich für diesen Kurs anmelden, werden Sie auch für diese Spezialisierung angemeldet.

Lernen Sie neue Konzepte von Branchenexperten
Gewinnen Sie ein Grundverständnis bestimmter Themen oder Tools
Erwerben Sie berufsrelevante Kompetenzen durch praktische Projekte
Erwerben Sie ein Berufszertifikat zur Vorlage

In diesem Kurs gibt es 4 Module

In this course, you will be provided with a conceptual overview of logs and their role in Intrusion Detection Systems (IDSs) and Security Information and Event Management tools (SIEMs). The course will discuss the general concept of an IDS and how it works to detect attacks before highlighting specific IDS and SIEM products, such as Suricata, Splunk and Google SecOps (Chronicle), respectively. You will then develop an understanding of how to access and navigate within Suricata and how basic rules are set up to provide alerts, events, and logs for malicious network traffic. This course will conclude with an introduction to Splunk and Google SecOps (Chronicle) and will showcase some of their features, including common commands.

By the end of this course, you will be able to: - Discuss the importance of logs during incident investigation - Determine how to read and analyze logs during incident investigation - Describe how common intrusion detection system (IDS) tools provide security value - Interpret the basic syntax and components of signatures and logs in IDS and NIDS tools - Describe how SIEM tools collect, normalize, and analyze log data - Perform queries in SIEM tools to investigate an incident

Moduldetails

In this module, you will be provided with a conceptual overview of logs and their role in Intrusion Detection Systems (IDSs) and Security Information and Event Management tools (SIEMs). The module will highlight the importance of logs, best practices for log collection and management, the variations of logs, and provide an overview of log file formats.

Das ist alles enthalten

3 Videos2 Lektüren2 Aufgaben1 Plug-in

3 VideosInsgesamt 9 Minuten

Introduction to network traffic and logs using IDs and SIEM tools1 Minute
The importance of logs 4 Minuten
Variations of logs 4 Minuten

2 LektürenInsgesamt 16 Minuten

Best practices for log collection and management8 Minuten
Overview of log file formats8 Minuten

2 AufgabenInsgesamt 16 Minuten

Test your knowledge: Overview of logs8 Minuten
Test your knowledge: Log components and formats8 Minuten

1 Plug-inInsgesamt 10 Minuten

Identify: Match log files to their file format10 Minuten

This module will discuss the general concept of an IDS and how it works to detect attacks before highlighting specific IDS and SIEM products, such as Suricata, Splunk and Google SecOps (Chronicle), respectively. Learners will then develop an understanding of how to access and navigate within Suricata and how basic rules are set up to provide alerts, events, and logs for malicious network traffic.

Das ist alles enthalten

4 Videos5 Lektüren1 Aufgabe2 App-Elemente

4 VideosInsgesamt 14 Minuten

Security monitoring with detection tools 4 Minuten
Components of a detection signature 4 Minuten
Examine signatures with Suricata4 Minuten
Examine Suricata logs2 Minuten

5 LektürenInsgesamt 32 Minuten

Detection tools and techniques8 Minuten
Overview of Suricata8 Minuten
Resources for completing labs4 Minuten
Lab tips and troubleshooting steps4 Minuten
Exemplar: Explore signatures with Suricata8 Minuten

1 AufgabeInsgesamt 8 Minuten

Test your knowledge: Overview of intrusion detection systems (IDS) 8 Minuten

2 App-ElementeInsgesamt 40 Minuten

Activity: Explore signatures and logs with Suricata30 Minuten
Optional exemplar: Explore signatures and logs with Suricata10 Minuten

In this module, you will get an introduction to Splunk and Google SecOps (Chronicle). The module will describe log sources and log ingestion and provide information on search methods with SIEM tools.