on 2017-10-24 02:30 PM
In order to register for a class, you need to first create a Dell Education account
If you need further assistance, contact us
Summary
This classroom-based training introduces security analysts and executives to the major features of RSA NetWitness Endpoint, focusing on Advanced Endpoint functionality introduced in RSA NetWitness Platform 11.3.
Overview
This training provides a general introduction to RSA NetWitness Endpoint, including architecture and data flow, analysis workflow and interface, as well as characteristics of malicious files and behavior. The two days consist of about 50% lecture and 50% hands-on lab work in a virtual environment.
Audience
Anyone new to RSA NetWitness Endpoint interested in increasing their familiarity with the tool’s analysis and admin functionality. Familiarity with other RSA NetWitness Platform tools is recommended.
Duration
2 days
Recommended Prerequisite Knowledge/Skills
Course Objectives
Upon successful completion of this training, participants should be able to:
Course Outline
Module 1 – Introduction
Module 2 – Architecture
Module 3 – Agents, Hosts, and Scans
Module 4 – Risk Scores and Metadata
Module 5 – Files and Libraries
Module 6 – Processes, Autoruns, and Anomalies
Module 7 – Autoruns and Anomalies
Module 8 – Alerts and Incidents
Module 9 – Malicious Behavior
In order to register for a class, you need to first create a Dell Education account
If you need further assistance, contact us