Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction & Course Orientation
- Defining course goals, expected outcomes, and preparing the lab environment
- Briefing on EDR concepts and the architectural design of the OpenEDR platform
- Gaining insight into endpoint telemetry and relevant data sources
OpenEDR Deployment
- Installing OpenEDR agents across Windows and Linux endpoints
- Establishing the OpenEDR server and setting up dashboards
- Configuring essential telemetry and logging functions
Basic Detection and Alerting
- Comprehending event types and their operational significance
- Setting detection rules and appropriate thresholds
- Monitoring alerts and managing notifications
Event Analysis & Investigation
- Examining events for suspicious behavioral patterns
- Correlating endpoint behaviors with prevalent attack techniques
- Leveraging OpenEDR dashboards and search utilities for deeper investigation
Response & Mitigation
- Reacting to alerts and identified suspicious activity
- Quarantining endpoints and mitigating active threats
- Recording actions and aligning them with incident response protocols
Integration & Reporting
- Connecting OpenEDR with SIEM systems or other security platforms
- Creating reports for management and key stakeholders
- Adopting best practices for ongoing monitoring and alert optimization
Capstone Lab & Practical Exercises
- Executing a hands-on lab that simulates real-world endpoint threats
- Applying workflows for detection, analysis, and response
- Reviewing lab outcomes and discussing key lessons learned
Summary and Next Steps
Requirements
- A solid grasp of fundamental cybersecurity principles
- Practical experience with Windows and/or Linux system administration
- A basic understanding of endpoint protection or monitoring utilities
Target Audience
- IT and security specialists beginning their journey with endpoint detection tools
- Cybersecurity engineers
- Security teams in small to mid-sized enterprises
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.