How to Write Correlation Directives for AlienVault USM

Watch the Webcast On-Demand

Watch It Now!

At the heart of SIEM is ability to correlate events from one or many sources into actionable alarms based on your security policies. AlienVault USM provides over 2100 correlation directives developed by the AlienVault Labs team, plus the ability to create your own custom rules.

Join us for this customer training session covering how to:

  • Ensure you are using the latest and greatest built-in correlation directives from AlienVault Labs
  • Write your own correlation directives based on events from one or more sources
  • Turn correlation information into actionable alarms
  • Use correlations to enforce your security policies

Meet Your Host

John Walsh

Sr. Technical Trainer

John is a Sr. Technical Trainer for AlienVault with 30 years of experience in Software Development, Operating Systems, Telecoms, Robotics, Virtualization and Cloud solutions.  Previously he worked for companies such as Ericsson and VMware. He develops and delivers training online and in person for AlienVault Customers.