AlienVault OSSIM
1.5 Hours
Beginner
2 CEU/CPE
This course will use AlienVault OSSIM to showcase a Security Information and Event Management (SIEM) system. A SIEM is used to aggregate logs for all sources in a network, analyze the logs through a correlation engine, and generate alarms on malicious indicators and activity. This guide will walk you through the installation and configuration of a very popular open source SIEM.
Download this white paper to learn more about the differences between AlienVault USM and AlienVault OSSIM and find out which product is right for you:
Comparing AlienVault® Unified Security Management® to AlienVault OSSIM™
AlienVault® Open Source Security Information and Event Management (AlienVault OSSIM™) provides event collection, normalization, and correlation. For more advanced functionality, the AlienVault Unified Security Management® (USM) platform builds on AlienVault OSSIM with these additional capabilities:
– Monitoring of cloud and on-premises environments from one fully integrated solution
– Log management, including 12 months of log storage for compliance requirements
– Extensive library of pre-built correlation rules, updated continuously by the AlienVault Labs Security Research Team
– Out-of-the-box report templates with flexible customization to simplify compliance and security operations reporting
Cybrary On The Go
Get the Cybrary app for Android for online and offline viewing of our lessons.
Support Cybrary
Donate Here to Get This Month's Donor Badge
