Overview

FortiSIEM Releases

• What is New in 7.1.1

• What is New in 7.1.0

• What is New in 7.0.4

• What is New in 7.0.3

• What is New in 7.0.2

• What is New in 7.0.1

• What is New in 7.0.0

Windows Agent Releases

Content Pack Updates

Key Concepts

Getting Started

Advanced Operations

• CMDB
• Incidents and Cases
• Device Support
• Rules, Reports, and Dashboards
• Advanced Health System
• Managing FortiSIEM

Administration

• Setup
  • Configuring Storage
  • Setting Organizations and Collectors (Service Provider)
  • Setting Collectors (Enterprise)
  • Setting Credentials
  • Discovering Devices
  • Editing Event Pulling
  • Editing Performance Monitors
  • Configuring Synthetic Transaction Monitors
  • Configuring Maintenance Calendars
  • Configuring Windows Agent
  • Configuring Linux Agent
  • Configuring FortiSIEM Manager
• Device Support
  • Working with Devices and Applications
  • Working with Event Attributes
  • Working with Event Types
  • Working with Parsers
  • Working with Custom Performance Monitors
  • Working with Custom Properties
  • Creating SNMP System Object Identifiers for Devices
  • Analyzing Custom Log Files
  • Configuring Local Syslog File Ingestion from a Directory
  • Configuring Local PCAP File Ingestion from a Directory
• Health
  • Viewing Cloud Health
  • Viewing Collector Health
  • Viewing Agent Health
  • Viewing Elasticsearch Health
  • Viewing Replication Health
• License
  • Viewing License Information
  • Viewing License Usage
  • Working with Nodes
  • Configuring and Maintaining Active-Active Supervisor Cluster
  • Configuring Disaster Recovery
• Content Update
• Settings
  • System Settings
  • Analytics Settings
  • Discovery Settings
  • Monitoring Settings
  • Event Handling Settings
  • Database Settings
  • Role Settings
  • Compliance Settings
  • General Settings

Managing CMDB

• Devices
  • Viewing Device Information
  • Working with Device Groups
  • Creating and Editing Devices
  • Performing Operations on Devices
  • Associating Parsers to a Device
  • Searching for Devices
• Applications
  • Viewing Application Information
  • Editing Applications
  • Working with Application Groups
• Users
  • Adding Users
  • Editing User Information
  • Performing Operations on Users
  • Working with User Groups
• Business Services
  • Viewing Business Services
  • Creating Business Services
  • Working with Business Service Groups
• CMDB Reports
  • Creating a New CMDB Report
  • Scheduling a CMDB Report
  • Running a CMDB Report
  • Adding CMDB Report to Dashboard

Managing Resources

• Reports
  • Viewing System Reports
  • Running System Reports
  • Creating New Reports
  • Working with Report Design Templates
  • Scheduling Reports
  • Importing and Exporting Reports
  • Importing and Exporting Report Definitions
• Rules
  • Viewing Rules
  • Creating a Rule
  • Activating and Deactivating a Rule
  • Testing a Rule
  • Importing and Exporting Rule Definitions
• Networks
  • Adding a Network
  • Modifying a Network
  • Deleting a Network
• Watch Lists
  • System-defined Watch List
  • Creating a Watch List
  • Modifying a Watch List
  • Using a Watch List
  • Exporting and Importing Watch List
• Protocols
  • Adding a Protocol
  • Modifying a Protocol
  • Deleting a Protocol
• Event Types
  • Adding an Event Type
  • Modifying an Event Type
  • Deleting an Event Type
• Working with AlienVault OTX
• Working with Dragos IOCs
• Working with FortiGuard IOCs
• Working with Malware Patrol
• Working with ThreatConnect IOCs
• Malware Domains
  • Adding a Malware Domain
  • Modifying a Malware Domain
  • Deleting a Malware Domain
  • Importing Malware Domains
  • Viewing Malware Domains
• Malware IPs
  • Adding a Malware IP
  • Modifying a Malware IP
  • Deleting a Malware IP
  • Importing Malware IPs
  • Viewing Malware IPs
• Malware URLs
  • Adding a Malware URL
  • Modifying a Malware URL
  • Deleting a Malware URL
  • Importing Malware URLs
  • Viewing Malware URLs
• Malware Processes
  • Creating Malware Process Groups
  • Adding Malware Processes
  • Modifying Malware Processes
  • Deleting a Malware Process
  • Importing Malware Processes
  • Viewing Malware Processes
• Country Groups
  • Creating a Country Group
  • Adding a Country Group
  • Modifying Country Groups
  • Deleting a Country Group
  • Changing the Home Country
• Malware Hash
  • Adding a Malware Hash
  • Modifying a Malware Hash
  • Importing/Updating User-defined Malware Hash
  • Viewing Malware Hash
• Default Password
  • Adding a Default Password
  • Modifying Default Password
  • Importing and Exporting Default Password
• Anonymity Network
  • Adding Anonymity Networks
  • Modifying Anonymity Networks
  • Updating Anonymity Networks
• User Agents
  • Adding User Agents
  • Modifying User Agents
  • Importing and Exporting User Agents
• Remediations
  • Adding Remediations
  • Modifying Remediations
  • Deleting Remediations
• Lookup Tables
  • Adding a Lookup Table
  • Deleting a Lookup Table
  • Working with Lookup Table Data
• Playbooks
  • Viewing Playbooks
  • Updating Playbooks
• Connectors
  • Viewing Connectors
  • Updating Connectors
• Machine Learning Jobs
  • Viewing Machine Learning Jobs
  • Editing a Machine Learning Job
  • Deleting a Machine Learning Job
• Osquery
  • Viewing osquery Templates
  • Creating osquery Templates

Working with Cases

• Creating a Ticket
• Editing a Ticket
• Managing Cases