Training Recomandtion

[smm (Stefano)]

Hi there,

I am an Elastic admin for observability. I would to start with the security (SIEM) topic as well. I am a newbie in this regard. Which of this trainings would you suggest to attend at first: Onsite & Online Training for Elasticsearch, Kibana, Beats, Logstash, and more | Elastic Training
Thanks!

Attachment
Threat Hunting with Kibana
Network Security Monitoring Cyber Operator
Network Security Monitoring Engineer
Elastic Endgame
Elastic Endgame Advanced Threat Hunting
Elastic Endgame Triage and Response

[georgii (Georgii Gorbachev)]

Hi @smm, there's some free content that you might probably want to start with, for instance:

• Small bite-size how-to videos: How-to Series: Elastic Security | Elastic Training
• Free course Elastic Security Fundamentals: SIEM | Elastic
• Elastic's Youtube channel Elastic - YouTube

On the channel, you can find several videos about Elastic Security, for example, this one:

End to End Incident Response Using Elastic Security

Private trainings seem like a good option as well.