RSA NetWitness UEBA Overview

Access Training

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

Summary

This self-paced, on-demand course is a perfect introduction to RSA NetWitness UEBA. It provides a high-level overview of the UEBA solution. There are three instructional videos. The first video includes instruction on what UEBA is and how it works, as well as demonstrations on how to navigate the UEBA user interface. The second video provides an overview of the RSA UEBA architecture as it relates to the system workflow. The third video focuses on the setup and administration of RSA UEBA

Audience

Anyone interested in an overview of the RSA NetWitness UEBA solution

Delivery Type
On-Demand Learning

Duration
45 Minutes

Prerequisite Knowledge/Skills

Students should have the following skills or taken the following training prior to attending this course:

 RSA Netwitness Logs and Network Foundations

 RSA Netwitness Logs and Network Core Administration

Or, equivalent experience using the Netwitness Logs and Network product in a production environment

Learning Objectives

Upon successful completion of this course, participants should be able to:

 Define UEBA and what it does

 Describe use cases for UEBA

 Describe the RSA UEBA work flow

 Navigate the UEBA screens in RSA NetWitness

 Provide an overview of the RSA UEBA architecture as it relates to the system workflow

 Examine a simplified system work flow

 Describe the pre-work required before setting up the UEBA solution

 List the data required to establish an initial baseline for RSA UEBA

 Discuss the three main schemas that are used for adapting log meta used in the UEBA solution

 Examine the timeline for the training process for the UEBA deployment

 Describe the five main steps in the setup process of UEBA

Course Outline

 Module 1: RSA NetWitness UEBA Introduction
 Module 2: RSA NetWitness UEBA Architecture Overview
 Module 3: RSA NetWitness UEBA Setup and Administration

Access Training

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us