Course Overview
This one-day course teaches you how to use the VMware Carbon Black® EDR™ product and leverage the capabilities to configure and maintain the system according to your organization’s security posture and policies. This course provides an in-depth, technical understanding of the Carbon Black EDR product through comprehensive coursework and hands-on scenario-based labs.
Prerequisites
There are no prerequisites for this course.
Audience Profile
System administrators and security operations personnel, including analysts and managers
Learning Objectives
By the end of the course, you would be able to meet the following objectives:
- Describe the components and capabilities of the Carbon Black EDR server
- Identify the architecture and data flows for Carbon Black EDR communication
- Describe the Carbon Black EDR server installation process
- Manage and configure the Carbon Black EDR server based on organizational requirements
- Perform searches across process and binary information
- Implement threat intelligence feeds and create watchlists for automated notifications
- Describe the different response capabilities available from the Carbon Black EDR server
- Use investigations to correlate data between multiple processes
Content Outline
- Introductions and course logistics
- Course objectives
- Hardware and software requirements
- Architecture
- Data flows
- Server installation review
- Installing sensors
- Configuration and settings
- Carbon Black EDR users and groups
- 4 Process Search and Analysis
- Filtering options
- Creating searches
- Process analysis and events
- Filtering options
- Creating searches
- Hash banning
- Search operators
- Advanced queries
- Enabling alliance feeds
- Threat reports details
- Use and Functionality
- Creating watchlists
- Use and Functionality
- Using the HUD
- Alerts workflow
- Using network isolation
- Using live response
FAQs
A: Radiant Techlearning is headquartered in the Electronic city & technology hub of Northern India, Noida, surrounded by several large multinational, medium & small Software companies. We have offices located all across the country and partners across the globe.
A: A virtual training environment is available at Radiant Techlearning's data centre for hands-on training. Using a remote desktop connection, participants can access these laboratories over the cloud with ease. You may learn from anywhere, in any time zone, with the help of radiant virtual labs.
A: The learners will be enthralled as we engage them in the natural world and Oriented industry projects during the training program. These projects will improve your skills and knowledge and give you a better experience. These real-time projects will help you greatly in future tasks and assignments.
A: To know about the fees details, you can email us at training@radianttechlearning.com with your requirement in detail containing the below information
In the case of Self/ Individual
- Training Program
- Training Mode (Online/ Classroom)
- Location (in case of the classroom):
- Background (Education/ Technology/ Year of experience, etc. )
- Training Timeline
In the case of Corporate Training
- Training Program of Participants
- Training Mode (Online/ Classroom)
- Location (in case of the classroom):
- Participant’s Background (Education/ Technology/ Year of experience, etc.)
- Training Timeline
- Expectations from the training program
A: Security operations personnel, including analysts and incident responders
A: This course has a duration of 1 day.
A: No. These training programs are helping to improve your skills & knowledge of the technology, which would allow you to land your dream job by learning them.