Download Our Latest Course Catalog | Download Now

[woo_multi_currency_layout10]

Advanced Analytics

A comprehensive course on managing FortiSIEM in complex environments, with advanced integrations and automation.

Advanced Analytics

Overview

Overview
This course provides in-depth training on managing FortiSIEM in a multi-tenant environment. It covers everything from rule architecture and baseline behavior to advanced analytics with nested queries and lookup tables. Additionally, it includes integration with FortiSOAR for effective incident response and remediation. By the end of the course, participants will be well-equipped to design, deploy, and manage complex FortiSIEM and FortiSOAR setups.
Prerequisites

To get the most out of this course, attendees should have completed the following courses or possess equivalent experience:

  • FCP – FortiGate Security

  • FCP – FortiGate Infrastructure

  • FCP – FortiSIEM

It is also recommended to have a working knowledge of:

  • Python programming

  • Jinja2 templating language

  • Linux systems

  • Security Orchestration, Automation, and Response (SOAR) technologies

Scope

This course dives deep into:

  • Multi-tenancy architecture in FortiSIEM

  • Collector and connector operations

  • Security rule creation and logic

  • Baseline and UEBA analysis

  • Advanced analytics using nested queries and lookup tables

  • Integration and automation with FortiSOAR

It also explores real-world deployment strategies for enterprise and MSSP environments.

Target Audience

This course is tailored for:

  • Security professionals managing FortiSIEM and FortiSOAR

  • Network administrators in enterprise and service provider environments

  • SOC analysts and engineers

  • System integrators and technical support staff

Anyone responsible for security event management and automated incident response across multiple customer networks will benefit from this training.

Best Practices
  • Use collectors strategically in hybrid environments to optimize performance

  • Regularly update and fine-tune rules for evolving threats

  • Monitor EPS usage and cluster performance to ensure scalability

  • Automate repetitive tasks using FortiSOAR scripts

  • Utilize lookup tables and nested queries for enhanced correlation and analytics

  • Maintain clear documentation of configurations and rules

Certification

Upon successful completion of this course, participants will be prepared to take a related Fortinet certification exam (depending on the current Fortinet certification path). This training helps fulfill the knowledge requirements for advanced FortiSIEM certifications and can contribute to professional development goals in cybersecurity operations.

FAQs

Q: Is this course available online?
A: Yes, it is available in both online and in-person formats.

Q: Do I need a Fortinet device to practice?
A: No, the course includes access to online labs with pre-configured environments.

Q: What if I’m new to FortiSIEM?
A: It’s recommended to complete the basic FortiSIEM course before taking this one.

Q: Will I receive a certificate?
A: Yes, a certificate of completion is provided at the end of the course.

Course Outline

  1. Introduction to Multi-Tenancy
  2. Defining FortiSIEM Collectors and FortiSOAR Connectors
  3. Operating Collectors
  4. Windows and Linux Agents
  5. Rules
  6. Single Subpattern Security Rules
  7. Multiple Subpattern Rules
  8. Baselines
  9. Baseline Rules
  10. FortiSIEM UEBA
  11. Nested Queries and Lookup Tables
  12. Clear Conditions
  13. Remediation
Note : A representative from Datacipher will contact you with further details
Payment Methods

At DataCipher, we offer a variety of payment options for our Fortinet courses. Here are the methods available:

Purchase Order (PO) – If your organization prefers using a purchase order, begin the registration process by clicking the Register button. At the conclusion of the registration form, choose the option “My company will pay for it, please send an invoice with the payment details.” Our training team will then provide an official quote and any necessary additional information that your accounts department might need to issue the PO.

Bank Transfer – DataCipher maintains bank accounts in both the US and Europe, accommodating all standard bank transfer methods such as IBAN/BIC, Swift, ACH, or wire transfer. To make a payment via bank transfer, simply use the Register button to sign up for your selected course.

Credit Card Payments – We accept payments from all major credit cards, including Mastercard, VISA, American Express, Discover & Diners, and Cartes Bancaires. Payments can be made directly through the registration link or by requesting an invoice that includes a web link for online payment. All transactions are secure, and DataCipher does not store any credit card information.

These options are designed to make the registration process as smooth and flexible as possible for all participants.

Status

Guaranteed to Run – DataCipher is committed to running this class unless unforeseen events such as an instructor’s accident or illness occur.

Guaranteed on Next Booking – The course will proceed once an additional student registers.

Scheduled Class – We have scheduled this course and rarely cancel due to low enrollment. We offer a “Cancel No More Than Once” guarantee, ensuring that if a class is canceled due to insufficient enrollment, the next session will run regardless of the number of attendees.

Sold Out – If the class is fully booked, please use our contact form to join the waiting list or to inquire about additional sessions. We’re here to accommodate your training needs and keep you informed of new opportunities.

Half and Full-Day Training

At DataCipher, we offer our training courses in both traditional full-day and convenient half-day formats. Our half-day classes are specifically designed for IT professionals who cannot be away from their workplaces for consecutive full days. This flexible schedule allows participants to dedicate a few hours to learning and then return to their regular work responsibilities.

The curriculum for both the full-day and half-day formats is identical. The primary difference is that the half-day classes spread the coursework over a more extended period, providing a balanced approach to professional education. DataCipher has been successfully running these half-day training sessions for several years, receiving consistently positive feedback from our customers. They appreciate the flexibility and report that the extended timeframe facilitates a deeper understanding of the material, as it gives them more time to absorb and reflect on the information learned.

Click below to download the course materials and any additional resources.

REQUEST CUSTOM DELIVERY

REQUEST a Quote

Become An Expert By Practice – Get Your Hands On Labs

Don’t let your tech outpace the skills of your people

TRUSTED BY TOP COMPANIES LIKE IBM, DELOITTE, ERICSSON, AND MORE.
DISCOVER OUR CUSTOMER PORTFOLIO.

Dedicated to excellence, we cultivate strong partnerships with worldwide technology innovators.

Testimonials

What Our Clients Say

You’re all set!

Thanks for registering. Our training team will be in touch soon to confirm your class schedule and help you get started.