FORTINET - NSE6 - FortiSIEM Analyst

Formation créée le 16/07/2026. Dernière mise à jour le 14/10/2026.
Version du programme : 1

Type de formation

Mixte

Durée de formation

21 heures (3 jours)
1 990,00 € HT
Envoyer ma demande
1 990,00 € HT
Envoyer ma demande
1 990,00 € HT
Envoyer ma demande
Besoin d’adapter cette formation à vos besoins ? N’hésitez pas à nous contacter afin d’obtenir un devis sur mesure ! Nous contacter

FORTINET - NSE6 - FortiSIEM Analyst


In this course, you will learn how to use FortiSIEM to search, enrich, and analyze events from customers in a managed security service provider (MSSP) organization. You will learn how to perform real-time and historical searches, and build advanced queries. You will also learn how to perform analysis and remediation of security incidents using traditional and machine learning (ML)assisted methods.

Objectifs de la formation

  • Describe how FortiSIEM solves common cybersecurity challenges
  • Describe the main components and the unique database architecture on FortiSIEM
  • Perform real-time and historical searches
  • Define structured search operators and search conditions
  • Reference the CMDB data in structured searches
  • Configure display fields and columns
  • Build queries from search results and events
  • Build nested queries and lookup tables
  • Build rule subpatterns and conditions
  • Manage and tune incidents
  • Resolve an incident
  • Create time-based and pattern-based clear conditions
  • Configure automation policies
  • Create rules using baselines
  • Analyze anomalies against baselines
  • Describe the threat hunting workflow
  • Analyze threat hunting dashboards
  • Describe FortiSIEM ML modes and algorithms
  • Describe how to train an ML model perform an analysis using a ML model
  • Describe the benefits of deploying FortiSIEM UEBA
  • Configure tags, rules, and incidents using UEBA data
  • Describe how ZTNA tags affect the FortiSIEM incident and remediation process
  • Configure a ZTNA tag using FortiSIEM to remediate incidents
  • Generate and export a report
  • Create a custom dashboard

Profil des bénéficiaires

Pour qui
  • Security professionals responsible for the detection, analysis, and remediation of security incidents using FortiSIEM should attend this course.
Prérequis
  • FortiGate Operator
  • FortiSIEM Administrator

Contenu de la formation

Introduction to FortiSIEM
Analytics
Nested Queries and Lookup Tables
Rules and Subpatterns
Incidents
Clear Conditions and Remediation
Threat Hunting
Performance Metrics and Baselines
Machine Learning
User and Entity Behavior Analytics
FortiSIEM ZTNA
Reports and Dashboards

Suivi de l'exécution et évaluation des résultats

  • Accueil des stagiaires dans une salle dédiée à la formation.
  • Documents supports de formation projetés en anglais
  • Exposés théoriques
  • Etude de cas concrets
  • Quiz en salle
  • Labs

Ressources techniques et pédagogiques

  • Feuilles de présence.
  • Questions orales ou écrites (QCM).
  • Mises en situation.
  • Formulaires d'évaluation de la formation.

Capacité d'accueil

Entre 4 et 10 apprenants

Délai d'accès

2 semaines