Select a different country or region to see content specific to your location and make online purchases.
Amazon Web Services (AWS)
Palo Alto Networks
Best Price Guarantee
VMware Carbon Black EDR Advanced Analyst
See all Courses
Currently there are no public dates for this course. We can offer you a private group training, or you can pre-register upfront for a future public class. Please contact us.
This one-day course teaches you how to use the VMware Carbon Black® EDR™ product during incident response. Using the SANS PICERL framework, you will configure the server and perform an investigation on a possible incident. This course provides guidance on using Carbon Black EDR capabilities throughout an incident with an in-depth, hands-on, scenario-based lab.
VMware Carbon Black EDR
This course requires completion of the following course:
By the end of the course, you should be able to meet the following objectives:
Utilize Carbon Black EDR throughout an incident
Implement a baseline configuration for Carbon Black EDR
Determine if an alert is a true or false positive
Fully scope out an attack from moment of compromise
Describe Carbon Black EDR capabilities available to respond to an incident
Create addition detection controls to increase security
Introductions and course logistics
VMware Carbon Black EDR & Incident Response
Framework identification and process
Implement the Carbon Black EDR instance according to organizational requirements