План на курса
Introduction & Course Orientation
- Course objectives, expected outcomes, and lab environment setup
- Overview of EDR concepts and OpenEDR platform architecture
- Understanding endpoint telemetry and data sources
OpenEDR Deployment
- Installing OpenEDR agents on Windows and Linux endpoints
- Setting up the OpenEDR server and dashboards
- Configuring basic telemetry and logging
Basic Detection and Alerting
- Understanding event types and their significance
- Configuring detection rules and thresholds
- Monitoring alerts and notifications
Event Analysis & Investigation
- Analyzing events for suspicious patterns
- Mapping endpoint behaviors to common attack techniques
- Using OpenEDR dashboards and search tools for investigation
Response & Mitigation
- Responding to alerts and suspicious activity
- Isolating endpoints and mitigating threats
- Documenting actions and integrating into incident response
Integration & Reporting
- Integrating OpenEDR with SIEM or other security tools
- Generating reports for management and stakeholders
- Best practices for continuous monitoring and alert tuning
Capstone Lab & Practical Exercises
- Hands-on lab simulating real-world endpoint threats
- Applying detection, analysis, and response workflows
- Review and discussion of lab results and lessons learned
Summary and Next Steps
Изисквания
- An understanding of basic cybersecurity concepts
- Experience with Windows and/or Linux administration
- Familiarity with endpoint protection or monitoring tools
Audience
- IT and security professionals starting with endpoint detection tools
- Cybersecurity engineers
- Small to mid-sized business security staff
Отзиви от потребители (4)
Обучителят беше много опитен и отдели време, за да даде много добра представа за проблемите на киберсигурността. Много от тези примери могат да бъдат използвани или модифицирани за нашите обучаеми и да създадат някои много ангажиращи урочни дейности.
Jenna - Merthyr College
Курс - Fundamentals of Corporate Cyber Warfare
Машинен превод
Pentester умения какво демонстрира учител
Oleksii Adamovych - EY GLOBAL SERVICES (POLAND) SP Z O O
Курс - Ethical Hacker
Машинен превод
Инструкторът има много широк спектър от познания и е отдаден на това, което прави. Той е в състояние да заинтересува слушателя с курса си. Обхватът на обучението напълно оправда очакванията ми.
Karolina Pfajfer - EY GLOBAL SERVICES (POLAND) SP Z O O
Курс - MasterClass Certified Ethical Hacker Program
Машинен превод
Всичко е отлично
Manar Abu Talib - Dubai Electronic Security Center
Курс - MITRE ATT&CK
Машинен превод