KL 034.4: Kaspersky Unified Monitoring and Analysis Platform. Administration

Categories: Kaspersky

About Course

Course description

Kaspersky Unified Monitoring and Analysis Platform (KUMA) is a SIEM solution designed to collect, store,
process, correlate and visualize a wide variety of data from different sources.
This course explains the architecture of the solution, introduces its capabilities and demonstrates how to install
and configure it using examples.
Our course consists of theoretical materials that describe the principles of operation and configuration and
hands-on labs that help provide practical experience.
Upon successful completion of the course, participants will be able to:

  • Deploy Kaspersky Unified Monitoring and Analysis Platform to demonstrate the solution
  • Configure receiving of events from different sources and in various formats
  •  Configure integration with external systems to enrich events and respond to incidents
  • Monitor the status of sources and system components

Course Outline

1. General
2. Architecture
3. Deployment
4. Event collecting and processing
5. Integrations
6. Event storage
7. Correlation
8. Alerts
9. Response
10. Monitoring source statuses and metrics

Labs

Lab 1. Install Kaspersky Unified Monitoring and Analysis Platform
Lab 2. Configure receiving of events using Windows Agent (WMI)
Lab 3. Configure receiving of DNS events
Lab 4. Configure receiving of events from Kaspersky Endpoint Security for Windows
Lab 5. Configure receiving of Linux events
Lab 6. Configure receiving of Kaspersky Security Center events
Lab 7. Configure receiving of Kaspersky Anti Targeted Attack Platform events
Lab 8. Configure receiving of EDR telemetry from KATA
Lab 9. Import information about computers from Kaspersky Security Center
Lab 10. Configure event enrichment using Active Directory
Lab 11. Configure integration with Kaspersky Endpoint Detection and Response
Lab 12. Configure integration with CyberTrace
Lab 13. Configure cold storage for events in KUMA
Lab 14. Configure source status monitoring
Lab 15. Back up Core (optional)
Lab 16. Configure receiving of events using Windows Agent (WEC) (optional)
Lab 17. Configure event routing (optional)
Lab 18. Configure authentication via Active Directory
Lab 19. Configure receiving of events using rsyslog
Lab 20. Make Core fault tolerant
Lab 21. Make Collector fault tolerant

World Food Programme (WFP)

Our work with the World Food Programme (WFP) focused on enabling the effective adoption of digital field technologies and essential digital literacy capabilities. Participants utilized mobile-based data collection platforms within operational contexts, enhancing accuracy, consistency, and confidence in digital data handling. The engagement strengthened WFP’s ability to rely on digital tools to support field operations and humanitarian programs.

Raya

For Raya, we delivered technology enablement focused on automation-driven operations and scalable application development. Participants gained hands-on experience with automation technologies and modern front-end development frameworks, supporting more efficient processes and the delivery of flexible, high-performance digital solutions aligned with business growth objectives.

EgyptAir

Our engagement with EgyptAir focused on enabling the effective use of application development technologies alongside the adoption of cybersecurity and secure computing practices within operational environments. Participants worked with Microsoft-based development platforms and programming technologies while gaining practical exposure to secure application usage, access control mechanisms, and threat-aware system interaction. This integrated technology enablement supported more secure digital operations, improved system reliability, and reinforced cyber resilience across aviation technology environments.

Banque Misr

We collaborated with Banque Misr to enable integrated enterprise technology capabilities across multiple domains. The engagement supported effective utilization of IT infrastructure environments, data analytics platforms, and professional capability development frameworks, allowing teams to operate confidently within complex enterprise systems. Our delivery approach focused on practical technology adoption, operational alignment, and building sustainable competencies that support reliable banking services and informed, data-driven decision-making.

Course Booking Form