Using Cisco Stealthwatch with Security Frameworks

Use Case Workshops are hands-on, instructor-led courses focused on specific use case outcomes in Cisco Stealthwatch Enterprise. The workshops are designed to help you quickly identify and investigate common threats and to provide effective workflows so that you can fully understand Stealthwatch capabilities.

To complete this workshop, the following components must be installed and configured on your network:

• Stealthwatch Management Console Version 7.0 or later
• Stealthwatch Flow Collector
• Stealthwatch Flow Sensor (DPI or other capable devices)

In this workshop, you’ll work through a series of use cases that focus on identifying indicators of compromise and mapping them to a security framework. This workshop is intended to be interactive and engaging. You are encouraged to ask questions, respond to questions, and share best practices and ideas. After taking this course you should be able to

• Define what a security framework is and what purpose they serve.
• Describe the advantages of using a security framework with Stealthwatch.
• Analyze adversary activity within your network using Stealthwatch.