This one-day equivalent e-learning VMware Carbon Black course teaches you how to use the VMware Carbon Black® Cloud Audit and Remediation™ product to build queries for IT hygiene, incident response, and vulnerability assessment to support your organization's security posture and policies. This course provides an in-depth, technical understanding of the product through comprehensive coursework and hands-on scenario-based labs. Product Alignment: VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint™ Advanced VMware Carbon Black Cloud Endpoint™ Enterprise 1 Course Introduction Introductions and course logistics Course objectives 2 Data Flows and Communication Hardware and software requirements Architecture Data flows 3 Query Basics osquery Available tables Query scope Running versus scheduling 4 Recommended Queries Use cases Inspecting the SQL query 5 SQL Basics Components Tables Select statements Where clause Creating basic queries 6 Filtering Results Where clause Exporting and filtering 7 Basic SQL Queries Query creation Running queries Viewing results 8 Advanced Search