SCN GmbH

VMware Carbon Black EDR Administrator Advanced

Seminar / Training VMware Carbon Black EDR Administrator Advanced

Architecture

  • Data flows and channels
  • Sizing considerations
  • Communication channels and ports

Server - data storage

  • SOLR database
  • Storage configurations and data aging
  • Partition states
  • Postgres
  • Module Storage

EDR API

  • CBAPI Overview
  • Display API calls in browser
  • Using the API to access data

Syslog integration

  • SIEM support
  • Configuration

Threat Intelligence feeds

  • Structure of feeds
  • Types of reporting indicators
  • Creating and adding custom threat feeds

Troubleshooting

  • Server-side scripts
  • Server logs
  • Sensor operations

We conduct this seminar online for you. You can book the training as a public seminar or as a company seminar. The practical exercises are carried out in our Remotelab and make up 40-50 percent of the seminar.

Your contacts

What makes our seminars different?

We offer seminars with a high practical relevance. The contents and exercises are geared to your daily tasks in the company and completely dispense with advertising references to other products of the software manufacturer.

All our training courses are manufacturer-independent. This enables us to offer critical considerations of the products themselves and comparisons with competitors of the manufacturer in the seminar. The course contents are our own and derived from the practical experience of our trainers in projects.

Of course, the contents of company seminars can be individually adapted to your needs. Please do not hesitate to contact us.

Oops, an error occurred! Code: 202411211722153b7dc564