Booking options
Price on Enquiry
Price on Enquiry
Delivered Online
Full day
All levels
Duration
1 Days
6 CPD hours
This course is intended for
System administrators and security operations personnel, including analysts and managers
Overview
By the end of the course, you should be able to meet the following objectives:
Describe the components and capabilities of the Carbon Black EDR server
Identify the architecture and data flows for Carbon Black EDR communication
Identify the architecture for a cluster configuration and Carbon Black EDR cluster communication
Describe the Carbon Black EDR server data types and data locations
Use the API to interact with the Carbon Black EDR server without using the UI
Create custom threat feeds for use in the Carbon Black EDR server
Perform the integration with a syslog server
Use different server-side scripts for troubleshooting
Troubleshoot sensor-side configurations and communication
This course teaches you how to use the advanced features of the VMware Carbon Black© EDR? product. This usage includes gaining access to the Linux server for management and troubleshooting in addition to configuring integrations and using the API. This course provides an in-depth, technical understanding of the Carbon Black EDR product through comprehensive coursework and hands-on scenario-based labs. This class focuses exclusively on advanced technical topics related to the technical back-end configuration and maintenance
Course Introduction
Introductions and course logistics
Course objectives
Architecture
Data flows and channels
Sizing considerations
Communication channels and ports
Server Datastores
SOLR database
Storage configurations and data aging
Partition states
Postgres
Modulestore
EDR API
CBAPI overview
Viewing API calls in the browser
Utilizing the API to access data
Threat Intelligence Feeds
Feed structure
Report indicator types
Custom threat feed creation and addition
Syslog Integration
SIEM support
Configuration
Troubleshooting
Server-side scripts
Server logs
Sensor operations
Additional course details:Notes
Delivery by TDSynex, Exit Certified and New Horizons an VMware Authorised Training Centre (VATC)
Nexus Humans VMware Carbon Black EDR Advanced Administrator training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward.
This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts.
Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.
While we feel this is the best course for the VMware Carbon Black EDR Advanced Administrator course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.
Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.
Nexus Human, established over 20 years ago, stands as a pillar of excellence in the realm of IT and Business Skills Training and education in Ireland and the UK....