Tivoli Security Operations Manager 3.1

Course Overview

By the end of the course, students will know how to use IBM Tivoli Security Operations Manager 3.1 to read security events from multiple sources, correlate them, identify incidents, and produce security reports.

Audience

This course is intended for implementers, administrators, and security analysts who need to correlate security events.

Skills Gained

After completing this course, students should be able to accomplish the following:

• Install IBM Tivoli Security Operations Manager 3.1 on Red Hat Linux using the MySQL database
• Collect events from sensors
• • Correlate events from different sources
  • Correlate events with vulnerability data
• Produce reports concerning security events

Prerequisites

• Required skills/knowledge
• Intrusion detection: Understand the basic concepts of intrusion detection
• Linux: Be able to administer a Linux host, including use of an editor
• Shell Programming: Be able to write and understand shell scripts
• SQL: Be able to write simple queries
• TCP/IP: Understand IP addresses, networks, and ports
• Tivoli Implementation Foundation Skills: Database Administrator Essentials (Foundation Skills)
• Tivoli Implementation Foundation Skills: TCP/IP (Foundation Skills)

Tivoli Security Operations Manager 3.1 / TP13GB (TP13GBGB)