Currently there are no public dates for this course. We can offer you a private group training, or you can pre-register upfront for a future public class. Please contact us.
This course is for threat hunters or anyone who will utilize Falcon Forensics to collect forensic information and use that information to perform investigations.
The course utilizes Falcon Forensics within the Investigate application to perform basic investigations using various dashboards.
Learners will learn about the forensic data collected, basic Splunk syntax and searches related to investigations.
To obtain the maximum benefit from this class, you should meet the following requirements:
Students who complete this course should be able to:
INTRODUCTION TO FALCON FORENSICS
DEPLOY FALCON FORENSICS
INVESTIGATE WITH DASHBOARDS
INVESTIGATE WITH SPLUNK SEARCHES