Course Overview
- Course Overview
Please note that the course is product-specific for OpenText™ EnCase™ Endpoint Security. Scholars should have a good understanding of utilizing OpenText EnCase Endpoint Investigator for incident response investigations.
This hands-on course is developed to instruct computer investigation and information security professionals’ incident analysis & response, data risk mitigation, and data policy compliance techniques, utilizing the EnCase Endpoint Security.
The EnCase Endpoint Security solution provides powerful network-enabled incident response capabilities and forensic-grade data risk assessments to expose and remediate any undiscovered threat — whether it be the latest custom malware, suspicious insider activity, or errant sensitive data.
2. Prerequisites
● Advance preparation for this course is not required.
● Please note that the course is product-specific for EnCase Endpoint Security. Scholars should have a decent understanding of using EnCase Endpoint Investigator for incident response investigations.
Audience Profile
This course is developed for corporate and government investigators and network security personnel. Incident response supervisors & team members are encouraged to attend as are learners working in a policy enforcement, data audit, or network intrusion investigation role. An comprehending of the concepts of computer forensics & familiarity with the EnCase Endpoint Investigator (formerly EnCase Enterprise) software is needed. Knowledge of computer networking hardware, protocols, & concepts is helpful, but not required. Class curriculum is designed to furnish a good overview of using EnCase Endpoint Security as a data-centric, cyberforensic solution for incident response and risk management.
Learning Objectives
● Decrease data-security noncompliance risk and cost.
● Decrease the risk and cost of damage that advanced malware causes to data assets.
● Decrease the time associated with successfully resolving security incidents.
● Comprehend how to integrate the various participants to ensure a cohesive response to threats.
Content Outline
- Cybersecurity issues currently facing corporations & organizations
- The capabilities provided with EnCase Endpoint Security
- Setting up & configuring EnCase Endpoint Security to begin investigations
- Creating investigations utilizing the EnCase Endpoint Security web interface
- Navigating via an investigation
- Preparing detections for jumping to the next level of investigation
- Utilizing the Memory Acquisition module
- Utilizing preconfigured policy rules to detect malicious or suspicious activity
- Creating & importing white and black lists
- Using conditions to concentrate searches
- Creating snapshots and using snapshot technology
- Creating a job to acquire RAM
- Conducting searches of the Windows® Registry
- Conducting a timeline analysis utilizing the real-time monitoring tools included with EnCase Endpoint Security
- Searching indicators of compromise (IOC)
- Finding Items of Interest (IoI)
- Collecting & reviewing data
- Remediation techniques
FAQs
A: To attend the training session, learners should have operational Desktops or Laptops with the needed specifications and a decent internet connection to access labs.
A: We would always suggest you attend the live session to practice & clarify the doubts instantly & get more value from your investment. However, due to some contingency, if you have to skip the class, Radiant Techlearning will help you with the recorded session of that specific day. However, those recorded sessions are meant only for personal consumption & NOT for distribution or commercial use.
A: Radiant Techlearning has a data center with a Virtual Training environment for the learners.
Participants can easily access these labs over Cloud with the help of a remote desktop connection.
Radiant virtual labs allow you to learn from anywhere, globally, and in any time zone.
A: The individuals will be enthralled as we engage them in real-world & industry Oriented projects during the training program. These projects will enhance your skills and knowledge & you will gain a better experience. These real-time projects will assist you a lot in your future tasks & assignments.
A: Radiant Telelearning offers customized solutions and training programs for individuals, teams & businesses depending on their needs. Here is how we assist each one through our diverse formats.
Individuals / One-O-One Training
● Focused learning sessions
● Programmed scheduling according to your choice
● Get personalized attention
Opt what technology interests you
● Teams- Enroll for our Online public or Classroom batches
● Get our specialized updated content for various skill levels
● Get on-demand learning & solve problems quickly
● Get assistance from the ground level through sequential learning
Enterprise:
● Get customized training programmed and solutions that can be curated for your business
● Meet the requirements of all learners
● Let your workforce be geared up for all kinds of problem-solving
● Inspire your teams for future
● Update your workforce with the latest information from technology and business leadership to marketing.
A: Radiant Telelearning has a large pool of in-house certified trainers & consultants with solid backgrounds and working experience in the technology.
Radiant Telelearning offers more than 800+ courses & for each course, Radiant has identified ideal-in-class instructors.
Radiant has highly intensive selection criteria for Technology Trainers & Consultants who provide you with training programs. Our trainers & consultants undergo a rigorous technical & behavioral interview & assessment process before they are boarded in our company.
Our Technology experts/trainers & consultants carry a deep-dive understanding of the technical subject & are certified by the OEM. Our faculty will deliver you the knowledge of each course from the basic level in an easy way & you are free to ask your doubts any time from your respective faculty.
Our trainers have the patience & ability to explain complex concepts in a simplistic way with depth & width of knowledge.
A: Radiant believes in a practical & creative approach to training & development, distinguishing it from other training & development platforms. Moreover, training courses are undertaken by experts with a wide range of experience in their domain
A: Radiant believes in a practical & creative approach to training & development, distinguishing it from other training & development platforms. Moreover, training courses are undertaken by experts with a wide range of experience in their domain