on
2021-10-25
06:10 AM
- edited on
2022-07-07
08:17 AM
by
aymanm2
Access Training
for Customers/Partners
Access Training
for NetWitness Employees
This is an Instructor Led Training class, for On-Demand/Self-Paced please click here
Summary
This course covers basic NetWitness Platform functionality, introducing the student to foundational aspects of the solution.
This is an update to version 11.6.
Overview
This course covers NetWitness Platform architecture, data flow, core and enhanced components, metadata concepts, rules, investigation techniques including queries, filtering and pivoting, along with reporting, alerting and incident management. Overviews of Endpoint Insights, Advanced Endpoint, UEBA and NetWitness Orchestrator are also provided. Students will gain insights into using the major features of the platform through a combination of lecture and demonstration, as well as practical hands-on exercises that reinforce the concepts.
Audience
Anyone interested and new to NetWitness Platform.
Duration: 3 days
Prerequisite Knowledge/Skills
Introduction to NetWitness Platform on demand learning
Students should be familiar with basic computer architecture, networking fundamentals and general information security concepts. Basic knowledge of the TCP/IP protocol stack is beneficial.
Course Objectives
Upon completion of this training, the student should be able to:
Course Outline
Module 1: NetWitness Platform Overview
Module 2: Investigation Basics
Module 3: Refining the Dataset
Module 4: Reporting Engine Basics
Module 5: Event Stream Analysis (ESA)
Module 6: Incident Management and Respond
Module 7: NetWitness Endpoint Insights Agent
Module 8: NetWitness UEBA Concepts
Module 9: NetWitness Orchestrator