From the course: Introduction to SecOps on Google Distributed Cloud (GDC) by Google
Join today to access over 25,300 courses taught by industry experts.
Security Information and Event Management (SIEM) - Google Cloud Platform Tutorial
From the course: Introduction to SecOps on Google Distributed Cloud (GDC) by Google
Security Information and Event Management (SIEM)
Play video to see the transcript
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Download the exercise files for this course.
Get started with a free trial today.
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.
Watch this course anytime, anywhere.
Get started with a free trial today.
Contents
-
-
(Locked)
Module overview1m
-
(Locked)
What is GDC4m 36s
-
(Locked)
GDC services5m 26s
-
(Locked)
GDC at Cymbal Federal1m 14s
-
(Locked)
The users of GDC5m 39s
-
(Locked)
The GDC operating model1m 14s
-
(Locked)
GDC architecture10m 7s
-
(Locked)
GDC security guarantees7m 42s
-
(Locked)
The Operations Center (OC)3m 2s
-
(Locked)
Module review40s
-
(Locked)
-
-
(Locked)
Module overview54s
-
(Locked)
The Security Operations Center (SOC)4m 32s
-
(Locked)
Defending the GDC platform3m 15s
-
(Locked)
Roles in the SOC1m 8s
-
(Locked)
Tier 1 and Tier 2 analysts in the SOC3m 58s
-
(Locked)
Tier 3 analysts in the SOC2m 48s
-
(Locked)
Security and the SOC1m 2s
-
(Locked)
SOC organization structure5m 43s
-
(Locked)
Interacting with external teams2m 28s
-
(Locked)
Module review46s
-
(Locked)
-
-
(Locked)
Module overview1m 44s
-
(Locked)
Logs in the GDC SOC4m 8s
-
(Locked)
Manual and automated security processes1m 12s
-
(Locked)
Security Information and Event Management (SIEM)4m 3s
-
(Locked)
Security Orchestration, Automation, and Response (SOAR)3m 59s
-
(Locked)
Endpoint Detection and Response (EDR)5m 1s
-
(Locked)
SIEM, EDR, and SOAR at Cymbal Federal1m 41s
-
(Locked)
An introduction to incident management6m 7s
-
(Locked)
The activities behind incident management6m 49s
-
(Locked)
The end-to-end incident response process1m 14s
-
(Locked)
Monitor2m 46s
-
(Locked)
Intake3m 49s
-
(Locked)
Escalate1m 45s
-
(Locked)
Investigate4m 19s
-
(Locked)
Contain and remediate2m 38s
-
(Locked)
Recover and report2m 52s
-
(Locked)
Recap of incident response management1m 18s
-
(Locked)
The incident response plan (IRP)1m 34s
-
(Locked)
The challenges of proactive cyber security4m 2s
-
(Locked)
Advanced security services in the SOC3m 7s
-
(Locked)
Advanced security services at Cymbal Federal2m 9s
-
(Locked)
The asset inventory3m 58s
-
(Locked)
Introduction to threat modeling5m 41s
-
(Locked)
Introduction to vulnerability management7m 26s
-
(Locked)
Introduction to security engineering6m 35s
-
(Locked)
Module review1m 9s
-
(Locked)
-
-
(Locked)
Module overview1m 9s
-
(Locked)
Tools in the SOC2m 12s
-
(Locked)
The MITRE ATT&CK framework3m 40s
-
(Locked)
GDC platform security1m 29s
-
(Locked)
Categories of tools for the GDC SOC3m 53s
-
(Locked)
Core tools in the GDC SOC: Splunk SIEM3m 58s
-
(Locked)
Core tools in the GDC SOC: Tenable Nessus3m 59s
-
(Locked)
Core tools in the GDC SOC: Portswigger Burp4m 39s
-
(Locked)
Core Tools in the GDC SOC: Trelix6m 21s
-
(Locked)
Core tools in the GDC SOC: Microsoft Defender Antivirus and ClamAV5m
-
(Locked)
Core tools in the GDC SOC: Palo Alto3m 11s
-
(Locked)
Observability tools in the GDC SOC1m 29s
-
(Locked)
LogMon2m 57s
-
(Locked)
The GDC observability ecosystem3m 26s
-
(Locked)
Observability tools in the GDC SOC: Grafana2m 36s
-
(Locked)
The query creation process in Grafana3m 28s
-
(Locked)
Observability tools in the GDC SOC: Prometheus2m 16s
-
(Locked)
Observability tools in the GDC SOC: Cortex2m 10s
-
(Locked)
Observability tools in the GDC SOC: Fluent Bit1m 31s
-
(Locked)
Observability tools in the GDC SOC: Loki1m 58s
-
(Locked)
Management tools in the GDC SOC: ServiceNow4m 48s
-
(Locked)
ServiceNow at Cymbal Federal1m 39s
-
(Locked)
Management tools in the GDC SOC: GitLab1m 49s
-
(Locked)
Management tools in the GDC SOC: Anthos Config Management (ACM)1m 58s
-
(Locked)
Management tools in the GDC SOC: Fleet1m 9s
-
(Locked)
Management tools in the GDC SOC: Harbor1m 34s
-
(Locked)
Management tools in the GDC SOC: Red Hat Enterprise Linux (RHEL)1m 7s
-
(Locked)
Management tools in the GDC SOC: MariaDB1m 23s
-
(Locked)
Module summary1m 20s
-
(Locked)
-
-
(Locked)
Module overview1m 14s
-
(Locked)
Log types in the GDC SOC2m 24s
-
(Locked)
Audit logs5m 51s
-
(Locked)
Audit logs at Cymbal Federal1m 36s
-
(Locked)
Security logs51s
-
(Locked)
Operational logs1m 36s
-
(Locked)
Operational logs at Cymbal Federal46s
-
(Locked)
Review: Logs in Splunk1m 19s
-
(Locked)
Metrics in Splunk1m 27s
-
(Locked)
Baseline metrics4m 34s
-
(Locked)
Security-specific metrics in Splunk1m 47s
-
(Locked)
Using Splunk metrics1m 57s
-
(Locked)
Splunk metrics at Cymbal Federal1m 30s
-
(Locked)
Splunk dashboards5m 32s
-
(Locked)
Alerts in Splunk1m 19s
-
(Locked)
Alerts at Cymbal Federal1m
-
(Locked)
Alert rules1m 55s
-
(Locked)
The alert inventory2m 4s
-
(Locked)
Module review59s
-
(Locked)