Course Code:
cortexxdr
Duration:
21 hours
Prerequisites:
- Knowledge of enterprise security concepts
Audience
- Security professionals
- Cybersecurity analysts
- Administrators
Overview:
Cortex XDR is a detection and response application that integrates network, endpoint, and cloud data natively to prevent and stop threats.
This instructor-led, live training (online or onsite) is aimed at security professionals who wish to learn how to use Cortex XDR in preventing and stopping the occurrence of sophisticated attacks and threats.
By the end of this training, participants will be able to:
- Understand the architecture and components of Cortex XDR.
- Create and manage profiles for exploit and malware prevention.
- Analyze behavioral threats and monitor response actions.
- Perform basic Cortex app troubleshooting.
Format of the Course
- Interactive lecture and discussion.
- Lots of exercises and practice.
- Hands-on implementation in a live-lab environment.
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
Course Outline:
Introduction
- Overview of Cortex XDR
- Understanding Cortex XDR components
Getting Started with Cortex XDR
- Setting up Cortex XDR
- Understanding Cortex XDR management console
- Understanding policy rules and profiles
Working with the Cortex Apps
- Overview of the Cortex apps
- Activating the Cortex XDR lab
Malware Protection
- Overview of malware profiles and restrictions
- Configuring and using malware protection modules
Exploit Protection
- Preventing application exploit
- Exploitation techniques and defense mechanisms
- Using exploit protection modules and exploit Profiles
Exceptions and Response Actions
- Understanding exceptions
- Tuning policies using exceptions
- Working with response actions
Behavioral Threat Analysis
- Understanding detection and response use cases
- Analyzing behavioral threats
- Using an analytics engine
Incident Management
- Using alerts
- Handling incidents
- Handling external alerts
- Alert exclusion and policies
Troubleshooting
- Methodologies and resources
- Using troubleshooting tools
Summary and Next Steps
Sites Published: