VMware Carbon Black Cloud Enterprise EDR - On Demand (EDU-VCBCEEDR-EL)

This one-day equivalent e-learning VMware Carbon Black course teaches you how to use the VMware Carbon Black® Cloud Enterprise EDR™ product and leverage its capabilities to configure and maintain the system according to your organization's security posture and policies. This course provides an in-depth, technical understanding of the product through comprehensive coursework and hands-on scenario-based labs. Product Alignment: VMware Carbon Black® EDR™ VMware Carbon Black Cloud Endpoint™ Enterprise 1 Course Introduction Introductions and course logistics Course objectives 2 Data Flows and Communication Hardware and software requirements Architecture Data flows 3 Searching Data Creating searches Search operators Analyzing processes Analyzing binaries Advanced queries 4 Managing Watchlists Subscribing Alerting Custom watchlists 5 Alert Processing Alert creation Analyzing alert data Alert actions 6 Threat Hunting in Enterprise EDR Cognitive Attack Loop Malicious behaviors 7 Response Capabilities Using quarantine Using live response