Free SIEM Training

General

• Jose Bravo – What is a SIEM? (5 Vídeos): https://www.youtube.com/watch?v=MtqFMe4zSpQ&list=PLHh9jhztlMyp8lyKXt9orVM57ygW_ihPS
• IPPSec – PowerSIEM Analyzing Sysmon Events with PowerShell: https://www.youtube.com/watch?v=MvfhIydxFmw

AlienVault OSSIM

• Cybrary – AlienVault OSSIM: https://www.cybrary.it/course/alienvault-ossim/

Elastic

• Elastic – SIEM Fundamentals: https://www.elastic.co/training/elastic-security-fundamentals-siem

ArcSight

• Paul Brettle – What is Series: https://youtube.com/playlist?list=PL_JhopV-r9zLigctFEOzic-af0sEuHZ-x
• Paul Brettle – ArcSight ESM 101: https://youtube.com/playlist?list=PL_JhopV-r9zIXDz0pX2dmSJvBGVkczF5y

QRadar

• Jose Bravo – QRadar (38 Vídeos): https://www.youtube.com/watch?v=P90e4iEJ32s&

Splunk

• Splunk – What is Splunk?: https://education.splunk.com/course/what-is-splunk
• Splunk – Intro to Splunk: https://education.splunk.com/course/intro-to-splunk-elearning
• Splunk – Using Fields: https://education.splunk.com/course/using-fields
• Splunk – Scheduling Reports & Alerts: https://education.splunk.com/course/scheduling-reports-alerts-elearning
• Splunk – Visualizations: https://education.splunk.com/course/visualizations-elearning
• Splunk – Search Under the Hood: https://education.splunk.com/course/search-under-the-hood-elearning
• Splunk – Intro to Knowledge Objects: https://education.splunk.com/course/intro-to-knowledge-objects-elearning
• Splunk – Intro to Dashboards: https://education.splunk.com/course/intro-to-dashboards-eLearning