IBM QRadar SIEM 7.6
Fundamentals course

From architecture to day-to-day operations

The official BQ205G syllabus grouped by day. Each block combines theory, live demo on version 7.6 and a guided lab. Pace and depth are adjusted to the team.

1. 01
   Day 1 · Fundamentals and architecture

   SIEM, architecture and first contact with the UI

   SIEM foundations applied to QRadar, on-prem and cloud architecture, and getting started with the new interface.

   • Foundations of QRadar's SIEM technology
   • On-premises and cloud architecture
   • Tour of the new user interface (UI)
   • Log sources and log management application
3. 02
   Day 2 · Data, rules and detection

   Flows, rules engine and use cases

   How QRadar turns raw data into useful alerts: network flows, Custom Rules Engine, use cases and apps.

   • Network flows and QRadar Network Insights
   • Custom Rules Engine (CRE) and good practice
   • Use Case Manager App
   • Asset management
   • App framework and content extensions
5. 03
   Day 3 · Analysis, reporting and admin

   Offences, AQL, reports and administration

   Day-to-day work for the analyst and administrator: offence management, AQL searches, reporting and platform operation.

   • Offence management and analyst workflows
   • Searches, filters and Ariel Query Language (AQL)
   • Automated reporting and the Pulse App
   • Administration: users, updates and performance tuning
   • Preparation for the official certifications

— On-site or live remote · from 2 students · EN · ES · FR.

A digital badge and a path to certification

On completion you receive a SIXE digital badge, verifiable on Credly and the base to sit the official IBM QRadar certifications.

SIXE badge · Credly QRadar Analyst Analyse threats, events and correlations from the SOC with confidence. Verifiable and linkable on LinkedIn.

Certification prep IBM QRadar certifications You leave prepared to sit the official IBM QRadar SIEM exams.

Training built around what your team actually does

1. 01IBM Business PartnerWe are an official IBM partner for security training. Official materials and course codes.
2. 02On the current release (7.6)All materials updated for QRadar SIEM 7.6. No stale screenshots or menus that no longer exist.
3. 03Instructors with real experienceTrainers who have deployed QRadar in enterprise clients and public administrations, not just in a lab.
4. 04Role-orientedPace and depth adapted to the team: SOC analyst, administrator or architect.
5. 05Guided labEvery block ends with hands-on practice on the platform, not just theory or slides.
6. 06Path to certificationPreparation for the official IBM exam, with practice tests and revision sessions.
7. 07SIXE digital badgeBadge on Credly on completion, verifiable on LinkedIn with a public URL.
8. 08EN · ES · FR · from 2 studentsOn-site or live remote, in three languages, with in-company training available.

How the itinerary continues

Fundamentals is the first stop. These are the natural next steps once the team is operating QRadar day to day.

Frequently asked questions