SCN GmbH

VMware Carbon Black EDR Advanced

Seminar / Training VMware Carbon Black EDR Advanced

VMware Carbon Black EDR and Incident Response

  • Framework identification and process

Preparation

  • Implementation of Carbon Black EDR instance according to organizational requirements.

Identification

  • Use of initial detection mechanisms
  • Processing of alarms
  • Proactive threat hunting
  • Incident detection

Containment

  • Scope of incidents
  • Collection of artifacts
  • Investigation

Elimination

  • Hash ban
  • Disposal of artefacts
  • Continuous monitoring

Lessons Learned

  • Optimization of Soot EDR
  • Closing incidents

Recovery

  • Endpoint recovery
  • Gaining more security

We conduct this seminar online for you. You can book the training as a public seminar or as a company seminar. The practical exercises are carried out in our Remotelab and make up 40-50 percent of the seminar.

Your contacts

What makes our seminars different?

We offer seminars with a high practical relevance. The contents and exercises are geared to your daily tasks in the company and completely dispense with advertising references to other products of the software manufacturer.

All our training courses are manufacturer-independent. This enables us to offer critical considerations of the products themselves and comparisons with competitors of the manufacturer in the seminar. The course contents are our own and derived from the practical experience of our trainers in projects.

Of course, the contents of company seminars can be individually adapted to your needs. Please do not hesitate to contact us.

Oops, an error occurred! Code: 20241121150936d5dbf4b6