AI Security: Protecting Machine Learning Systems
Next: 14 - 18 Dec 2026 · Paris
Paris, Barcelona, London +7 more
IT Management and Cyber Security · IMCS-015
Security Information and Event Management (SIEM)
SIEM platforms collect and correlate security events across the organisation, enabling detection of threats and supporting investigations and compliance. However, many…
- Duration5 days
- Next date16 - 20 Nov 2026
- Cities6 cities
- Fee from£2,840
Course overview
Why Attend
SIEM platforms collect and correlate security events across the organisation, enabling detection of threats and supporting investigations and compliance. However, many SIEM deployments generate noise rather than value.
This LLMI course covers SIEM architecture, log source onboarding, parsing and normalisation, correlation rules and detection use cases, alert tuning, dashboards, investigations, compliance reporting and SIEM programme management. Participants design detection use cases and tuning approaches.
The course suits security analysts, engineers and managers.
Course Objectives
Explain SIEM architecture and capabilities
Plan log source onboarding
Develop detection use cases
Tune alerts to reduce noise
Use SIEM for investigations and reporting
Manage and improve SIEM programmes
Target Audience
Security analysts and engineers
SOC staff
IT security managers
System administrators
Compliance professionals
Auditors
Course Methodology
Architecture presentations
Use-case design workshops
Demonstrations
Tuning exercises
Case studies
Course outline
-
1Day 1: SIEM Fundamentals
- Purpose of SIEM
- Architecture
- Deployment options
- Licensing and cost
- Selection
- Exercise: Requirements
-
2Day 2: Log Management
- Log sources
- Onboarding
- Parsing
- Retention
- Data quality
- Workshop: Log source plan
-
3Day 3: Detection Use Cases
- Use-case frameworks
- Correlation rules
- Threat mapping
- Behaviour analytics
- Testing
- Exercise: Writing use cases
-
4Day 4: Operations
- Alert triage
- Tuning
- Dashboards
- Investigations
- Compliance reports
- Demonstration: Investigation
-
5Day 5: Programme Management
- Metrics
- Governance
- Automation
- Improvement
- Roadmap
- Capstone: SIEM improvement plan
Dates and fees
Related
More IT Management and Cyber Security courses
Application Security and Secure Software Development
Next: 21 - 25 Dec 2026 · Barcelona
Barcelona, Munich, London +5 more
Artificial Intelligence (AI) in Cyber Forensics: Investigating Advanced Cyber Crimes
Next: 16 - 20 Nov 2026 · Istanbul
Istanbul, Rome, Frankfurt +5 more