Course Overview
This one-day course teaches you how to use the VMware Carbon Black® EDR™ product during incident response. You will configure the server using the SANS PICERL framework and investigate a possible incident. This course guides using Carbon Black EDR capabilities throughout an incident with an in-depth, hands-on, scenario-based lab.
Prerequisites
This course requires completion of the following course:
- VMware Carbon Black EDR Administrator
Audience Profile
Security operations personnel, including analysts and incident responders
Learning Objectives
By the end of the course, you would be able to meet the following objectives:
- Utilize Carbon Black EDR throughout an incident
- Implement a baseline configuration for Carbon Black EDR
- Determine if an alert is a true or false positive
- Fully scope out an attack from the moment of compromise
- Describe Carbon Black EDR capabilities available to respond to an incident
- Create additional detection controls to increase security
Content Outline
- Introductions and course logistics
- Course objectives
- Framework identification and process
Implement the Carbon Black EDR instance according to organizational requirements
- Use initial detection mechanisms
- Process alerts
- Proactive threat hunting
- Incident determination
- Incident scoping
- Artifact collection
- Investigation
- Hash banning
- Removing artifacts
- Continuous monitoring
- Rebuilding endpoints
- Getting to a more secure state
- Tuning Carbon Black EDR
- Incident closeout
FAQs
A: Security operations personnel, including analysts and incident responders
A: This course has a duration of 1 day.
A: No. These training programs are helping to improve your skills & knowledge of the technology, which would allow you to land your dream job by learning them.
Our training program will maximize your ability and chances of getting a successful job. You have to select a job according to your convenience. Your performance in the training program and interview is crucial for getting a good job.
A: Yes, your employer can pay your fees.
A: The learners will be enthralled as we engage them in the natural world and Oriented industry projects during the training program. These projects will improve your skills and knowledge and give you a better experience. These real-time projects will help you a lot in your future tasks and assignments.