VCBCEEDR - VMware Carbon Black Cloud Enterprise EDR

This one-day course teaches you how to use the VMware Carbon Black® Cloud Enterprise EDR™ product and leverage its capabilities to configure and maintain the system according to your organization’s security posture and policies. This course provides an in-depth, technical understanding of the product through comprehensive coursework and hands-on scenario-based labs.

Duration: 1.0 day

Enquire Now

Start learning today!

Click Hereto customize your Training

Objectives

By the end of the course, you should be able to meet the following objectives:
  • Describe the components and capabilities of VMware Carbon Black Cloud Enterprise EDR 
  • Identify the architecture and data flows for VMware Carbon Black Cloud Enterprise EDR communication 
  • Perform searches across endpoint data to discover suspicious behavior 
  • Manage watchlists to augment the functionality of VMware Carbon Black Cloud Enterprise EDR 
  • Create custom watchlists to detect suspicious activity in your environment 
  • Describe the process for responding to alerts in VMware Carbon Black Cloud Enterprise EDR 
  • Discover malicious activity within VMware Carbon Black Cloud Enterprise EDR 
  • Describe the different response capabilities available from VMware Carbon Black Cloud

Content

Course Introduction
  • Introductions and course logistics 
  • Course objectives

Data Flows and Communication
  • Hardware and software requirements 
  • Architecture
  • Data flows

Searching Data
  • Creating searches 
  • Search operators 
  • Analyzing processes 
  • Analyzing binaries 
  • Advanced queries

Managing Watchlists
  • Subscribing 
  • Alerting 
  • Custom watchlists

Alert Processing 
  • Alert creation 
  • Analyzing alert data 
  • Alert actions

Threat Hunting in Enterprise EDR
  • Cognitive Attack Loop 
  • Malicious behaviors

Response Capabilities
  • Using quarantine 
  • Using live response

Audience

Security operations personnel, including analysts and managers

Prerequisites

This course requires completion of the following course:
  • VMware Carbon Black Cloud Fundamentals

Certification

product-certification

Course Benefits

product-benefits
  • Career growth
  • Broad Career opportunities
  • Worldwide recognition from leaders
  • Up-to Date technical skills
  • Popular Certification Badges

VMware Popular Courses

vsicm7

This course is the foundation for most of the other VMware technologies in the software-defined data center.

vmhvicm7.10

VMware Horizon 7: Install, Configure, Manage v7.10
Enquire Now
 
 
 
 
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy