Evolved SIEM & Threat Defense with RSA NetWitness Platform, brought to you by RSA University _________________________________________________________________
Course Outline
- Module 1 – What is NetWitness Endpoint?
- The ‘Enterprise Compromise Assessment Tool’
- Endpoint visibility
- Analytical tools
- Scan requests
- Module 2 – Architecture Overview
- Overview
- NetWitness Endpoint server
- NetWitness Endpoint database
- Endpoints
- Key directories
- Module 3 – ECAT Modules
- Module interface
- Filters
- Daily responsibilities
- Indicators of compromise (IOC)
- Types of malicious modules
- Module 4 – ECAT Machines
- Interface
- Status
- View customization
- Groups
- Agent maintenance
- Module 5 – Analysis Basics
- Threat assessment
- Signatures and recognition
- Characteristics and behavior
- Context
To learn more about the RSA NetWitness Endpoint Foundations course, please visit this page for full course description and registration information.
