| Topic | Details |
| Topic 1 | - Log Analysis: This domain focuses on examining and interpreting logs, events, and incidents, using FortiView dashboards and widgets for data visualization, and diagnosing report generation issues.
|
| Topic 2 | - SOC operation and automation: This domain addresses configuring events and event handlers, setting up incidents and indicators for threat tracking, configuring playbooks and fabric automation for orchestrated responses, and troubleshooting automation workflow issues.
|
| Topic 3 | - Features and concepts: This domain covers FortiAnalyzer's integration with Security Fabric for log collection, the technical processes of log data flow, normalization and parsing, and the SOC features available for security monitoring and analysis.
|
| Topic 4 | - Reports: This domain explains the use of reports, charts, and datasets for presenting security intelligence, covers report configuration to meet organizational requirements, and includes troubleshooting report generation problems.
|
