VMware Carbon Black EDR Advanced Analyst - EDU-VMCBEAAN

PT25226
Summary
This one-day VMware Carbon Black course teaches you how to use the VMware Carbon Black EDR product during incident response. Using the SANS PICERL framework, you will configure the server and perform an investigation on a possible incident. This course provides guidance on using Carbon Black EDR capabilities throughout an incident with an in-depth, hands-on, scenario-based lab.
Prerequisites
This course requires completion of the following course: VMware Carbon Black EDR Administrator.
Duration
1 Days
Audience
Security operations personnel, including analysts and incident responders
Topics
  • Course Introduction
  • VMware Carbon Black EDR & Incident Response
  • Preparation
  • Identification
  • Containment
  • Eradication
  • Recovery
  • Lessons Learned

Related Scheduled Courses