I want the option for multiple days of instructor led training with labs and exams. This should cover topics like writing custom parsers, configuring custom ingestion, general administration, dashboards, search, etc.
Instead, we have this video that spends less than 15 minutes discussing detection rules - https://www.skills.google/paths/187. The documentation alone isn’t enough for someone like me to magically understand how everything works. I’ve also highlighted documentation issues with our sales team + support over the past year where information was missing or just wrong, which is even less of an incentive to use the documentation for anything beyond basic reference.
I’m hearing the same complaints from the company we partnered with to help migrate to SecOps. They’re hearing the same complaints from other SecOps customers they support. I’m under the impression there’s a certification option for SecOps now. Who is the audience for this cert and how do they even prepare for it?