Course curriculum

    1. Read before you start

    1. Prerequisites

    2. EDR agent installation - Windows

    3. Video - Installing the EDR agent

    4. EDR agent troubleshooting - Windows

    5. Video - Troubleshooting the EDR

    6. V14 - Updating the EDR agents from V1 to V2

    7. Video - Updating the EDR agents from V1 to V2

    8. Quiz - Installing the EDR agent

    1. Configuration workflow

    2. Configuring in detect mode

    3. Video - Adding a new detection configuration

    4. Whitelisting benign alerts (true positives without impact)

    5. Video - Implementing a whitelist on a benign alert

    6. Configuring in remediation mode

    7. Video - Enabling automated remediations

    8. [OPTIONAL] Understanding child configurations priorities

    9. Quiz - Configuring the EDR

    1. How fast should you be able to spot alarms?

    2. From the XDR to SOC notification: Automating alarm notifications

    3. Video - Creating a SOAR rule for notification upon remediation

    4. Quiz - SOAR

    1. From notification to SOC level 1: Triage focusing on remediations

    2. Video - Triage using the remediation dashboard

    3. Quiz - Triage

    1. Machine, Binary, User: the three main pivots you can rely on

    2. Machine investigation functionalities on the XDR

    3. Binary investigation functionalities on the XDR

    4. User investigation functionalities on the XDR

    5. Video - Qualification on the XDR

    6. Quiz - Qualification

About this course

  • Free
  • 32 lessons
  • 0.5 hours of video content

Discover your potential, starting today