SOC-ANSFOFortinetFO-SOC-ANS7.4<p>After completing this course, you will be able to: </p> <ul> <li>Describe the main functions and roles within a SOC</li><li>Identify common security challenges that Fortinet SOC solutions address</li><li>Analyze simulated attacks and categorize attacker tactics using industry frameworks</li><li>Analyze and respond to security incidents according to industry best practices for incident handling</li><li>Describe basic FortiAnalyzer SOC concepts, definitions, and features</li><li>Manage administrative domains</li><li>Describe FortiAnalyzer operation modes</li><li>Configure FortiAnalyzer collectors and analyzers</li><li>Design and deploy FortiAnalyzer Fabric deployments</li><li>Manage Fabric groups</li><li>Analyze and manage events, and customize event handlers</li><li>Analyze and create incidents</li><li>Analyze threat hunting dashboards</li><li>Analyze indicators of compromise (IOC) information from compromised hosts</li><li>Manage outbreak alerts</li><li>Identify playbook components</li><li>Describe trigger types and their properties</li><li>Create and customize playbooks from a template</li><li>Create new playbooks from scratch</li><li>Use variables in tasks</li><li>Configure connector actions</li><li>Monitor playbooks</li><li>Export and import playbooks</li></ul><p>You must have an understanding of the topics covered in the following courses, or have equivalent experience: </p> <ul> <li><span class="cms-link-marked"><a class="fl-href-prod" href="/swisscom/course/fortinet-faz-ans"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>FortiAnalyzer Analyst <span class="fl-prod-pcode">(FAZ-ANS)</span></a></span></li><li><span class="cms-link-marked"><a class="fl-href-prod" href="/swisscom/course/fortinet-anlzr-admn"><svg role="img" aria-hidden="true" focusable="false" data-nosnippet class="cms-linkmark"><use xlink:href="/css/img/icnset-linkmarks.svg#linkmark"></use></svg>FortiAnalyzer Administrator <span class="fl-prod-pcode">(ANLZR-ADMN)</span></a></span></li></ul><p>Security professionals involved in the design, implementation, and monitoring of Fortinet SOC solutions based on FortiAnalyzer should attend this course.</p><ul> <li>1. SOC Concepts and Security Frameworks</li><li>2. FortiAnalyzer Architecture</li><li>3. SOC Operations</li><li>4. SOC Automation</li></ul>After completing this course, you will be able to: - Describe the main functions and roles within a SOC - Identify common security challenges that Fortinet SOC solutions address - Analyze simulated attacks and categorize attacker tactics using industry frameworks - Analyze and respond to security incidents according to industry best practices for incident handling - Describe basic FortiAnalyzer SOC concepts, definitions, and features - Manage administrative domains - Describe FortiAnalyzer operation modes - Configure FortiAnalyzer collectors and analyzers - Design and deploy FortiAnalyzer Fabric deployments - Manage Fabric groups - Analyze and manage events, and customize event handlers - Analyze and create incidents - Analyze threat hunting dashboards - Analyze indicators of compromise (IOC) information from compromised hosts - Manage outbreak alerts - Identify playbook components - Describe trigger types and their properties - Create and customize playbooks from a template - Create new playbooks from scratch - Use variables in tasks - Configure connector actions - Monitor playbooks - Export and import playbooksYou must have an understanding of the topics covered in the following courses, or have equivalent experience: - FortiAnalyzer Analyst (FAZ-ANS) - FortiAnalyzer Administrator (ANLZR-ADMN)Security professionals involved in the design, implementation, and monitoring of Fortinet SOC solutions based on FortiAnalyzer should attend this course.- 1. SOC Concepts and Security Frameworks - 2. FortiAnalyzer Architecture - 3. SOC Operations - 4. SOC Automation1 Tag950.001310.00