In order to register for a class, you need to first create a Dell Education account
If you need further assistance, contact us
Summary
This self-paced, on-demand course is a perfect introduction to RSA NetWitness UEBA. It provides a high-level overview of the UEBA solution. There are three instructional videos. The first video includes instruction on what UEBA is and how it works, as well as demonstrations on how to navigate the UEBA user interface. The second video provides an overview of the RSA UEBA architecture as it relates to the system workflow. The third video focuses on the setup and administration of RSA UEBA
Audience
Anyone interested in an overview of the RSA NetWitness UEBA solution
Delivery Type
On-Demand Learning
Duration
45 Minutes
Prerequisite Knowledge/Skills
Students should have the following skills or taken the following training prior to attending this course:
RSA Netwitness Logs and Network Foundations
RSA Netwitness Logs and Network Core Administration
Or, equivalent experience using the Netwitness Logs and Network product in a production environment
Learning Objectives
Upon successful completion of this course, participants should be able to:
Define UEBA and what it does
Describe use cases for UEBA
Describe the RSA UEBA work flow
Navigate the UEBA screens in RSA NetWitness
Provide an overview of the RSA UEBA architecture as it relates to the system workflow
Examine a simplified system work flow
Describe the pre-work required before setting up the UEBA solution
List the data required to establish an initial baseline for RSA UEBA
Discuss the three main schemas that are used for adapting log meta used in the UEBA solution
Examine the timeline for the training process for the UEBA deployment
Describe the five main steps in the setup process of UEBA
Course Outline
Module 1: RSA NetWitness UEBA Introduction
Module 2: RSA NetWitness UEBA Architecture Overview
Module 3: RSA NetWitness UEBA Setup and Administration
In order to register for a class, you need to first create a Dell Education account
If you need further assistance, contact us