Security alerting and monitoring

By the end you’ll be able to

• Monitor systems, applications and infrastructure with agent-based and agentless tools
• Explain monitoring activities: log aggregation, alerting, scanning, reporting, archiving, alert response/quarantine and alert tuning to reduce false positives
• Use monitoring tools: SIEM, SCAP and benchmarks, antivirus, DLP, vulnerability scanners, SNMP traps, NetFlow, syslog, packet analyzers and port mirroring