This one-day course teaches you how to use the VMware Carbon Black® EDR™ product during incident response. Using the SANS PICERL framework, you will configure the server and perform an investigation on a possible incident.
This course provides guidance on using Carbon Black EDR capabilities throughout an incident with an in-depth, hands-on, scenario-based lab.
Course Introduction.
VMware Carbon Black EDR & Incident Response.
Preparation.
Identification.
Containment,
Eradication.
Recovery.
Lessons Learned.
Security operations personnel, including analysts and incident responders.
This course requires completion of the following course: VMware Carbon Black EDR Administrator.
This course is available at :
Branch
Schedule
Maadi
FromTo
Subscribe To Our Education Newsletter
Keep up to date to our new offers and receive e-mails about the latest courses and certificates
