This one-day VMware Carbon Black course teaches you how to use the VMware Carbon Black EDR product during incident response. Using the SANS PICERL framework, you will configure the server and perform an investigation on a possible incident. This course provides guidance on using Carbon Black EDR capabilities throughout an incident with an in-depth, hands-on, scenario-based lab.
This course requires completion of the following course: VMware Carbon Black EDR Administrator.
Security operations personnel, including analysts and incident responders
- Course Introduction
- VMware Carbon Black EDR & Incident Response
- Lessons Learned