.pptx.png)
Course / Course Details
By - CYSEC Academy
To get the best experience from this course, prospective learners should have:
This course provides you with a practical introduction to Security Information and Event Management (SIEM) operations and Splunk Processing Language (SPL) for security monitoring and threat detection. You will learn how SIEM platforms collect, normalize, and analyze security logs, and how to write effective SPL queries to detect threats, investigate incidents, and build meaningful dashboards for security operations.
The course emphasizes hands-on understanding of SIEM architecture, common security use cases, detection logic, and operational dashboards used in modern Security Operations Centers (SOCs).
By the end of this course, you will be able to:
Explain how SIEM platforms work and their role in security operations
Identify and map common security use cases to SIEM detections
Write basic to intermediate SPL queries for log analysis and threat detection
Build detection queries and alerts using SIEM data
Create and interpret dashboards for security monitoring and reporting
Support SOC investigations using correlated log data
No Review found
.jpg)
