Blue Team Level 1 domain
Security Information and Event Monitoring
Logging, aggregation, normalization, correlation, detection rules, Sigma and practical Splunk SIEM usage.
20 lessons4 sections84 source pages
Open glossary →01
Introduction to SIEM
6 lessons
02
Logging and Aggregation
6 lessons
03
Correlation
4 lessons
04
Using Splunk SIEM
4 lessons