Kurs-ID: TDIBM_BQ505G
Kurs QRadar EDR: Foundations
In this course, you learn about the IBM Security® QRadar® EDR architecture and how to position the product within your company’s landscape of security solutions. You gain skills around how to install the QRadar EDR Hive on your premises and the EDR Agents on your endpoints. You can review the user interface and how to navigate the EDR Dashboard while investigating endpoint threats.
This course applies to version 3.12 of the on-premises QRadar EDR offering.
Seminarinhalte
Getting started
- Dashboard overview
- Architecture
- QRadar EDR on-prem installation
- Downloading, installing, and updating the QRadar EDR Agent
Protecting your endpoints
- Investigating threats on endpoints
- Managing endpoints
- Understanding and responding to alerts and trends
- Acting upon behavioral malware and ransomware attacks
- Hunting for threats on your endpoint using a QRadar EDR lab
Administering your environment
- Configuring notifications and Simple Mail Transfer Protocol (SMTP)
- Setting up forwarding alerts
- Defining policies
- Handling downloaded and quarantined files from your endpoints
- Setting up users, groups, and clients
- Configuring Hive-Cloud Score
- Creating applications
- Monitoring audit logs
Kursthemen
Das Training QRadar EDR: Foundations ist folgendem Thema zugeordnet:
Zielgruppe
Security operations center (SOC) Administrator, SOC Analyst, Security Analyst, Incident Responder, Managed Service Security Provider (MSSP)
Dauer und Zeiten
2 Kurstage
Termine
Kurspreis für offene Schulungen
1700,00 € zzgl. 19% MwSt. (2023,00 € inkl. 19% MwSt.)