Accredited Security Analyst I
A Security Analyst's job is to perform the role of Security Analyst at a Security Operations Center (SOC) environment using the relevant tools of Splunk Security suite.
You will learn how to:
Use Splunk at a foundational level
Identify and track security incidents, analyze security risks, use predictive analytics and threat discovery using Splunk Enterprise Security and tools
Configure and use Phantom and UBA
The pre-requisites for this accreditation is to complete the Splunk Core Certified Power User.
The Using Splunk Enterprise Security course prepares security practitioners to track security incidents, analyse security risks, use predictive analytics, and threat discovery.
The Using Splunk Enterprise Security course covers the use of Enterprise Security’s dashboards, forms and workflow to identify, find root cause and resolve security issues.
Splunk Operations Suite for Partners
Splunk SIEM Solutions for Partners
Splunk Phantom (SOAR) for Partners
Working with Splunk Support for Partners
Enterprise Security Phantom and UBA Hands on Workshop
Splunk Accredited Security Analyst I Accreditation – Exam is free of charge in the Partner Portal once all pre-requisites have been completed.
When you’re ready to take a Splunk Certification exam, please view the Exam-Registration-Tutorial for registration assistance. As a reminder, each exam attempt costs US$125. Bulk registration vouchers can be purchased at a discounted price of five registrations for US$500.
How to register for your exam
There are three ways to purchase a PearsonVUE registration voucher:
1) Directly from PearsonVUE
This is the most streamlined approach. Follow the steps for account creation and exam registration provided at www.pearsonvue.com/splunk
Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.
2) From Splunk (as an individual)
Log into your existing account at Splunk.com/Education to purchase a registration code. Payment can be made via credit card or existing Splunk Education credits. Splunk will email you a unique registration code, which can be used for registration at www.pearsonvue.com/splunk .
3) From Splunk (as an account)
Your Splunk Sales Rep can add certification exams to any deal. Once the number of vouchers has been requested, Splunk will email your unique registration codes, which can be used for registration at www.pearsonvue.com/splunk
All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of registration fee.
One of the best trainers I've had - keeps content relevant & explains the tasks in easily understood language. Extremely knowledgeable in all fields relating to the content. Well paced & accommodated to everyone's questions & progress.
Participant, Splunk Enterprise Data Administration