Symantec Endpoint Detection and Response Planning, Implementation, and Administration R1 Course Training

The Symantec Endpoint Detection and Response 4.x Planning, Implementation, and Administration course is designed for the IT security and systems administration professional in a Security Operations role. This course covers how to investigate, remediate, and recover from a security incident using Symantec Endpoint Detection and Response, as well as the prerequisite sizing and architecture configurations for implementing Symantec Endpoint Detection and Response On-Prem.

Associated certification:

Exam 250-580: Endpoint Security Complete – R2 Technical Specialist

Plan and implement a Symantec Endpoint Detection and Response deployment
Configure SEDR to perform endpoint detection and response
Identify evidence of suspicious and malicious activity
Search for indicators of compromise
Block, isolate, and remove threats in the environment
Collect forensic information

Module 1: Introduction

The Evolving Threat Landscape
Challenges of Endpoint Detection and Response in the environment
How Symantec Endpoint Detection and Response meets objectives
Components of Symantec Endpoint Detection and Response
Shared Technologies
Symantec Endpoint Detection and Response Add-Ons and Integrations

Module 2: Architecture and Sizing

Architecture and Sizing Overview
Architecture
Sizing

Module 3: Implementation

System Requirements
Installing and Bootstrapping
Setup Wizard
Management Console Overview
Managing Certificates
User Accounts and Roles
Symantec Endpoint Protection Integration

Module 4: Detecting Threats

Understanding Suspicious & Malicious Activity
Prerequisite configuration or considerations
Identifying evidence of suspicious/malicious activity with Symantec EDR

Module 5: Investigating Threats

General Stages of an Advanced Attack
Understanding Indicators of Compromise
Searching for Indicators of Compromise
Analyzing Endpoint Activity Recorder Data
Additional Investigation Tools

Module 6: Responding to Threats

Cybersecurity Framework
Isolating Threats in The Environment
Blocking Threats in The Environment
Removing Threats in The Environment
Tuning the Environment

Module 7: Reporting on Threats

Recovery Overview
Notifications and Reporting
Collecting forensic data for further investigation of security incidents
Using Symantec EDR to create a Post Incident Report

This course assumes that students are familiar with Symantec Endpoint Detection & Response and Symantec Endpoint Protection.

Overview

Associated certification:

Exam 250-580: Endpoint Security Complete – R2 Technical Specialist

Objective

Plan and implement a Symantec Endpoint Detection and Response deployment
Configure SEDR to perform endpoint detection and response
Identify evidence of suspicious and malicious activity
Search for indicators of compromise
Block, isolate, and remove threats in the environment
Collect forensic information

Outline

Module 1: Introduction

The Evolving Threat Landscape
Challenges of Endpoint Detection and Response in the environment
How Symantec Endpoint Detection and Response meets objectives
Components of Symantec Endpoint Detection and Response
Shared Technologies
Symantec Endpoint Detection and Response Add-Ons and Integrations

Module 2: Architecture and Sizing

Architecture and Sizing Overview
Architecture
Sizing

Module 3: Implementation

System Requirements
Installing and Bootstrapping
Setup Wizard
Management Console Overview
Managing Certificates
User Accounts and Roles
Symantec Endpoint Protection Integration

Module 4: Detecting Threats

Understanding Suspicious & Malicious Activity
Prerequisite configuration or considerations
Identifying evidence of suspicious/malicious activity with Symantec EDR

Module 5: Investigating Threats

General Stages of an Advanced Attack
Understanding Indicators of Compromise
Searching for Indicators of Compromise
Analyzing Endpoint Activity Recorder Data
Additional Investigation Tools

Module 6: Responding to Threats

Cybersecurity Framework
Isolating Threats in The Environment
Blocking Threats in The Environment
Removing Threats in The Environment
Tuning the Environment

Module 7: Reporting on Threats

Recovery Overview
Notifications and Reporting
Collecting forensic data for further investigation of security incidents
Using Symantec EDR to create a Post Incident Report

Target audience

Prerequisites

This course assumes that students are familiar with Symantec Endpoint Detection & Response and Symantec Endpoint Protection.

Datum op aanvraag

Cisco-training

Cisco-certificering

Cisco Learning Credits

Cisco Continuing Education

Cisco Digital Learning

Cisco Business Enablement

Cisco trainingscatalogus

Fortinet-certificering

Fortinet-training

Fortinet trainingscatalogus

ATC Status

Fortinet Professionele Services

Microsoft-training

Extreme-training

Technische-certificering

Extreme trainingscatalogus

ATP accreditatie

Services Oplossingen

Over ons

Symantec Endpoint Detection and Response 4.x Planning, Implementation, and Administration R1

Follow Up Courses

BEBC - Building an Effective Business Case

BIDSP - Introduction to Business Intelligence: Designing a Successful BI Programme

Network Automation with Python and Ansible

CDCE - Certified Data Centre Expert

BAIDSP - Business Analysis Introduction: Defining Successful Projects

Building Web Applications with React and Redux (REACT)

U8617S - HPE NonStop SQL/MX Database Management

Networker Installation, Configuration and Administration

System Operator for IBM i

CDMS - Certified Data Centre Migration Specialist

Know someone who´d be interested in this course?
Let them know...

Adres

Verbinden