VMware Carbon Black EDR Administrator

Course Introduction
– Introductions and course logistics
– Course objectivesPlanning and Installation
– Hardware and software requirements
– Architecture
– Data flows
– Server installation review
– Installing sensorsServer Administration
– Configuration and settings
– Carbon Black EDR users and groupsProcess Search and Analysis
– Filtering options
– Creating searches
– Process analysis and eventsBinary Search and Banning Binaries
– Filtering options
– Creating searches
– Hash banningSearch best practices
– Search operators
– Advanced queriesThreat Intelligence
– Enabling alliance feeds
– Threat reports details
– Use and functionalityWatchlists
– Creating watchlists
– Use and functionalityAlerts / Investigations / Response
– Using the HUD
– Alerts workflow
– Using network isolation
– Using live response