FortiSIEM Analyst Course Training | FCP in Security Operations Certification

In this course, you will learn how to use FortiSIEM to search, enrich, and analyze events from customers in a managed security service provider (MSSP) organization. You will learn how to perform real-time and historical searches, and build advanced queries. You will also learn how to perform analysis and remediation of security incidents using traditional and machine learning (ML)assisted methods.

Product Versions:

FortiSIEM 7.4

Exam:

This course prepares you for the Fortinet NSE 6 - FortiSIEM 7.4 Analyst.

Associated Certifications:

Fortinet Certified Professional (FCP): Security Operations (Part of Elective Exams)

Describe how FortiSIEM solves common cybersecurity challenges
Describe the main components and the unique database architecture on FortiSIEM
Perform real-time and historical searches
Define structured search operators and search conditions
Reference the CMDB data in structured searches
Configure display fields and columns
Build queries from search results and events
Build nested queries and lookup tables
Build rule subpatterns and conditions
Manage and tune incidents
Resolve an incident
Create time-based and pattern-based clear conditions
Configure automation policies
Create rules using baselines
Analyze anomalies against baselines
Describe the threat hunting workflow
Analyze threat hunting dashboards
Describe FortiSIEM ML modes and algorithms
Describe how to train an ML model perform an analysis using a ML model
Describe the benefits of deploying FortiSIEM UEBA
Configure tags, rules, and incidents using UEBA data
Describe how ZTNA tags affect the FortiSIEM incident and remediation process
Configure a ZTNA tag using FortiSIEM to remediate incidents
Generate and export a report
Create a custom dashboard

Introduction to FortiSIEM
Analytics
Nested Queries and Lookup Tables
Rules and Subpatterns
Incidents
Clear Conditions and Remediation
Threat Hunting
Performance Metrics and Baselines
Machine Learning
User and Entity Behavior Analytics
FortiSIEM ZTNA
Reports and Dashboards

Security professionals responsible for the detection, analysis, and remediation of security incidents using FortiSIEM should attend this course.

You must have an understanding of the topics covered in the following courses, or have equivalent experience:

FortiGate Operator
FortiSIEM Administrator

Overview

Product Versions:

FortiSIEM 7.4

Exam:

This course prepares you for the Fortinet NSE 6 - FortiSIEM 7.4 Analyst.

Associated Certifications:

Fortinet Certified Professional (FCP): Security Operations (Part of Elective Exams)

Objective

Describe how FortiSIEM solves common cybersecurity challenges
Describe the main components and the unique database architecture on FortiSIEM
Perform real-time and historical searches
Define structured search operators and search conditions
Reference the CMDB data in structured searches
Configure display fields and columns
Build queries from search results and events
Build nested queries and lookup tables
Build rule subpatterns and conditions
Manage and tune incidents
Resolve an incident
Create time-based and pattern-based clear conditions
Configure automation policies
Create rules using baselines
Analyze anomalies against baselines
Describe the threat hunting workflow
Analyze threat hunting dashboards
Describe FortiSIEM ML modes and algorithms
Describe how to train an ML model perform an analysis using a ML model
Describe the benefits of deploying FortiSIEM UEBA
Configure tags, rules, and incidents using UEBA data
Describe how ZTNA tags affect the FortiSIEM incident and remediation process
Configure a ZTNA tag using FortiSIEM to remediate incidents
Generate and export a report
Create a custom dashboard

Outline

Introduction to FortiSIEM
Analytics
Nested Queries and Lookup Tables
Rules and Subpatterns
Incidents
Clear Conditions and Remediation
Threat Hunting
Performance Metrics and Baselines
Machine Learning
User and Entity Behavior Analytics
FortiSIEM ZTNA
Reports and Dashboards

Target audience

Security professionals responsible for the detection, analysis, and remediation of security incidents using FortiSIEM should attend this course.

Prerequisites

You must have an understanding of the topics covered in the following courses, or have equivalent experience:

FortiGate Operator
FortiSIEM Administrator

Päivämäärille

` 23 Feb - 24 Feb, 2026
` 23 Mar - 24 Mar, 2026
` 20 Apr - 21 Apr, 2026
` 18 May - 19 May, 2026
` 15 Jun - 16 Jun, 2026
` 13 Jul - 14 Jul, 2026

FortiSIEM Analyst

Päivämäärille

Follow Up Courses

FortiGate Administrator

SD-WAN Core Administrator

FortiOS Administrator

FortiAuthenticator Administrator

FortiManager Administrator

FortiSIEM Analyst

FortiClient EMS Administrator

Enterprise Firewall Administrator

FortiSASE Core Administrator

FortiMail Administrator

Know someone who´d be interested in this course?
Let them know...

FortiSIEM Analyst

Päivämäärille

Follow Up Courses

FortiGate Administrator

SD-WAN Core Administrator

FortiOS Administrator

FortiAuthenticator Administrator

FortiManager Administrator

FortiSIEM Analyst

FortiClient EMS Administrator

Enterprise Firewall Administrator

FortiSASE Core Administrator

FortiMail Administrator

Know someone who´d be interested in this course? Let them know...

Know someone who´d be interested in this course?
Let them know...