Kaspersky Unified Monitoring and Analysis Platform
Kaspersky Unified Monitoring and Analysis Platform (KUMA) is a SIEM solution designed for collecting, storing,
processing, correlating and visualizing very different data from various sources.
This course explains the solution’s architecture, introduces its capabilities and demonstrates through examples
how to install and configure it.
Our course consists of theoretical materials that describe operation and configuration principles and hands-on labs
that help acquire practical experience.
Upon successful completion of this course, students will be able to:
- Deploy Kaspersky Unified Monitoring and Analysis Platform to demonstrate the solution and create reports
- Configure receiving events from different sources and in different formats
- Fine-tune normalization, aggregation and enrichment of events to meet the customer’s requirements
- Configure correlation rules to detect incidents
- Configure integration with external systems to enrich events and respond to incidents
- Handle incidents and analyze events
- Configure notifications and create reports
Requirements for the students
- Basic understanding of networking technologies, such as TCP/IP, DNS, email, web
- Basic Windows and Linux administering skills
- Basic knowledge of information security principles
- General idea of regular expressions
Ideal for: System Administrators, Security Experts and Administrators, Technical Support and Presale Engineers.
Duration: 2 Day
Related Products:
- Kaspersky Unified Monitoring and Analysis Platform 2.0.1
- Kaspersky Security Center 14
- Kaspersky Endpoint Security 11.10
- Kaspersky Security for Windows Server 11.1
- Kaspersky Anti Targeted Attack Platform 4.1
- Kaspersky CyberTrace 4.1
- Kaspersky Threat Lookup