RSA NetWitness UEBA Overview

Document created by Matthew Bradley Employee on Oct 3, 2018
Version 1Show Document
  • View in full screen mode

Access Training

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

 

Summary

This self-paced, on-demand course is a perfect introduction to RSA NetWitness UEBA. It provides a high-level overview of the UEBA solution. There are three instructional videos. The first video includes instruction on what UEBA is and how it works, as well as demonstrations on how to navigate the UEBA user interface. The second video provides an overview of the RSA UEBA architecture as it relates to the system workflow. The third video focuses on the setup and administration of RSA UEBA

 

Audience

Anyone interested in an overview of the RSA NetWitness UEBA solution

 

Delivery Type
On-Demand Learning


Duration
45 Minutes


Prerequisite Knowledge/Skills

Students should have the following skills or taken the following training prior to attending this course:

 RSA Netwitness Logs and Network Foundations

 RSA Netwitness Logs and Network Core Administration

Or, equivalent experience using the Netwitness Logs and Network product in a production environment

 

Learning Objectives

Upon successful completion of this course, participants should be able to:

 Define UEBA and what it does

 Describe use cases for UEBA

 Describe the RSA UEBA work flow

 Navigate the UEBA screens in RSA NetWitness

 Provide an overview of the RSA UEBA architecture as it relates to the system workflow

 Examine a simplified system work flow

 Describe the pre-work required before setting up the UEBA solution

 List the data required to establish an initial baseline for RSA UEBA

 Discuss the three main schemas that are used for adapting log meta used in the UEBA solution

 Examine the timeline for the training process for the UEBA deployment

 Describe the five main steps in the setup process of UEBA

 

Course Outline

 Module 1: RSA NetWitness UEBA Introduction
 Module 2: RSA NetWitness UEBA Architecture Overview
 Module 3: RSA NetWitness UEBA Setup and Administration

 

 

 

 

 

Access Training

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

Attachments

    Outcomes