FortiAnalyzer Analyst
The FortiAnalyzer Analyst Course is designed for participants interested in analyzing and automating responses to cyberattacks using Fortinet’s Security Fabric. During the one-day training, which is split equally between lectures and hands-on lab activities, participants will learn how to use FortiAnalyzer for centralized log management. The foundation for recognizing and managing current and potential threats through log analysis will be covered. Participants will also explore event, incident, and report management, as well as creating and managing playbooks for task automation. These skills are critical for those who aspire to become a SOC analyst in environments using Fortinet products. The Course helps prepare for the FCP – FortiAnalyzer Analyst Certification exam, part of the Fortinet Certified Professional – Security Operations certification path .
Course Objectives
Below is a summary of the main objectives of the FortiAnalyzer Analyst Course :
- Understand the basic concepts and functionality of FortiAnalyzer.
- Describe the purpose of log collection and storage.
- View and search logs in Log View and FortiView.
- Manage events and event handlers.
- Configure and analyze incidents and perform threat hunting activities.
- Learn to create compliance reports using FortiAnalyzer.
- Integrate FortiAnalyzer with Fortinet Security Fabric for centralized event monitoring.
- Automate log analysis and incident response.
Course Certification
This course helps you prepare to take the:
FCP Exam – FortiAnalyzer Analyst;
Course Outline
- Understand basic FortiAnalyzer concepts and features
- Describe the purpose of collecting and storing logs
- View and search for logs in Log View and FortiView
- Understand SOC features
- Manage events and event handlers
- Configure and analyze incidents
- Perform threat hunting tasks
- Understand outbreak alerts
- Describe how reports function within ADOMs
- Customize and create charts and datasets
- Customize and run reports
- Configure external storage for reports
- Attach incident reports
- Troubleshooting reports
- Understand playbook concepts
- Create and monitor playbooks
Course Mode
Instructor-Led Remote Live Classroom Training;
Trainers
Trainers are authorized Fortinet accredited instructors and certified in other IT technologies, with years of hands-on experience in the industry and in Training.
Lab Topology
For all types of delivery, the participant can access the equipment and actual systems in our laboratories or directly in international data centers remotely, 24/7. Each participant has access to implement various configurations, Thus immediately applying the theory learned. Below are some scenarios drawn from laboratory activities.
Course Details
Course Prerequisites
- Attendance at the FortiGate Administrator Course or equivalent skills is recommended.
Course Duration
Intensive duration 1 days;
Course Frequency
Course Duration: 1 days (9.00 to 17.00) - Ask for other types of attendance.
Course Date
- FortiAnalyzer Analyst Course (Intensive Formula) – On request – 09:00 – 17:00
Steps to Enroll
Registration takes place by asking to be contacted from the following link, or by contacting the office at the international number +355 45 301 313 or by sending a request to the email info@hadartraining.com
