logo
Home

QRadar UBA: Detecting Insider Threats BQ610G

  • CMDBID 1001839
  • Course Code BQ610G
  • Duration 1 Days
Scroll

IBM Security Course

course overview

download outline

Select Country and City to View dates & book now

Overview

b'

Learn how to detect insider threats triggered by anomalous or malicious user behavior. Get ready to install, configure, and tune IBM Security\xc2\xae QRadar UBA and the Machine Learning app. Improve your skill to investigate user behavior with UBA and expand your threat detection capabilities across your network with the QRadar\xc2\xae Advisor with Watson\xe2\x84\xa2 app.

'

Audience

Security Analyst

Skills Gained

  • Analyze UBA concepts, such as the senseValue variable, risk scores, and the IBM Sense DSM.
  • Identify how QRadar rules are connected to UBA and how user information is imported into the app.
  • Install and configure the app, as well as the User Import tool and the the Machine Learning app.
  • Tune UBA settings to improve the application’s behavior and performance.
  • Analyze how UBA can help you detect and investigate insider threats.
  • Analyze how to use the UBA Dashboard.
  • Investigate how to detect malicious user behavior.

Outline

Unit 1: Architecture and Overview

Unit 2: Setup

  • Installation
  • Configuration
  • User Import
  • Machine Learning configuration

Unit 3: Tuning

Unit 4: An overview to detecting and investigating insider threats

Unit 5: Student exercise

Talk to an expert

Thinking about Onsite?

If you need training for 3 or more people, you should ask us about onsite training. Putting aside the obvious location benefit, content can be customised to better meet your business objectives and more can be covered than in a public classroom. Its a cost effective option. One on one training can be delivered too, at reasonable rates.

Submit an enquiry from any page on this site and let us know you are interested in the requirements box, or simply mention it when we contact you.

All $ prices are in USD unless it’s a NZ or AU date

SPVC = Self Paced Virtual Class

LVC = Live Virtual Class

Please Note: All courses are availaible as Live Virtual Classes

Trusted by over 1/2 million students in 15 countries

Our clients have included prestigious national organisations such as Oxford University Press, multi-national private corporations such as JP Morgan and HSBC, as well as public sector institutions such as the Department of Defence and the Department of Health.