VMware Carbon Black EDR Administrator Course Overview

Target Audience for VMware Carbon Black EDR Administrator

The VMware Carbon Black EDR Administrator course equips IT professionals with advanced skills in endpoint security and threat detection.

• IT Security Analysts
• Endpoint Security Administrators
• Incident Responders
• SOC (Security Operations Center) Personnel
• Network Security Engineers
• Systems Administrators with a focus on security
• Cybersecurity Consultants
• IT Professionals aiming for a career in cybersecurity
• VMware Carbon Black Users
• Compliance and Auditing Officers responsible for IT security compliance
• Threat Intelligence Analysts

Learning Objectives - What you will Learn in this VMware Carbon Black EDR Administrator?

Introduction to Learning Outcomes and Concepts Covered:

The VMware Carbon Black EDR Administrator course equips learners with the skills to install, configure, and manage the VMware Carbon Black EDR platform effectively, ensuring enhanced security and threat response.

Learning Objectives and Outcomes:

• Understand the hardware and software prerequisites for deploying VMware Carbon Black EDR and grasp the underlying architecture for informed planning.
• Learn the data flows within the Carbon Black EDR environment to monitor and analyze network traffic.
• Gain practical experience in server installation and sensor deployment to ensure proper communication and data collection.
• Master the configuration and administration of EDR settings, users, and groups to maintain a secure and tailored environment.
• Develop expertise in process search and analysis using filtering options to identify and scrutinize suspicious activities.
• Acquire the ability to perform binary searches and implement hash banning to prevent the execution of malicious files.
• Apply search best practices utilizing search operators and advanced queries to efficiently navigate the EDR dataset.
• Leverage threat intelligence by enabling alliance feeds, understanding threat report details, and utilizing their functionalities for proactive security measures.
• Create and manage watchlists to monitor for indicators of compromise (IoCs) and other suspicious behaviors.
• Enhance incident response capabilities through the use of the HUD, alerts workflow, network isolation, and live response tools for immediate action against threats.