Lab Guide: Elastic Security for SIEM

Below are the labs for Elastic Security for SIEM. Select the lab assigned to complete it.

1 - Elastic Stack Overview

• Lab 1.1: Elastic Agent Configuration
• Lab 1.2: Configuring Agent Policies and Integrations

2 - Elastic Common Schema (ECS)

Note: This section does not contain any labs

3 - Discover

• Lab 3.1: Discover - Getting Started with Kibana
• Lab 3.2: Discover - Searching with KQL/Lucene

4 - Visualizations

• Lab 4.1: Aggregation Based Visualizations - Data Table

5 - Lens

• Lab 5.1: Lens Visualizations - Create a Visualization
• Lab 5.2: Lens Visualizations - Data Table
• Lab 5.3: Lens Visualizations - Multi-Layer Date Histogram

6 - Dashboards

• Lab 6.1: Utilizing Dashboards - Creation
• Lab 6.2: Utilizing Dashboards - Analysis

7 - Security App

• Lab 7.1: Security App - Getting Started with the Security App
• Lab 7.2: Security App - Explore Pages
• Lab 7.3: Security App - Detection Rule Types
• Lab 7.4: Security App - Alerts
• Lab 7.5: Security App - Timelines
• Lab 7.6: Security App - Cases

---

© Elasticsearch BV 2015-2023. All rights reserved. Decompiling, copying, publishing and/or distribution without written consent of Elasticsearch BV is strictly prohibited.