Security Data Management: Ingestion, Parsing and Normalization

Collecting and normalizing security telemetry: log sources, forwarders, parsers, the Unified Data Model and data retention.

GCP-381 12 lessons planned ▶ Video lessons coming soon

Offered by HSM University · Google Cloud Certification Prep

Course content

  1. 1Security telemetry sourcesComing
  2. 2Ingesting Google Cloud logsComing
  3. 3Ingesting on-premises and third-party logsComing
  4. 4Forwarders and feedsComing
  5. 5Parsers and parser extensionsComing
  6. 6The Unified Data ModelComing
  7. 7Entity context and enrichmentComing
  8. 8Data quality and coverage gapsComing
  9. 9Retention and data exportComing
  10. 10Search and data explorationComing
  11. 11Cost and volume managementComing
  12. 12Lab walkthrough: onboarding a new log sourceComing

Requirements

Recommended background. You can start any course at any time.

Description

Collecting and normalizing security telemetry: log sources, forwarders, parsers, the Unified Data Model and data retention.