Trellix EDR

The Trellix Endpoint Detection and Response Administration lab prepares SOC Analysts to understand, communicate, and use the features provided by Endpoint Detection and Response (EDR). Trellix EDR helps to manage the high volume of alerts, empowering analysts of all skill levels to do more and investigate more effectively. Through hands-on lab exercises, you will learn how to detect advanced device threats, fully investigate, and quickly respond.

 

Course modules:

1. Deploying Trelix EDR
2. Deploying the Endpoint Clients
3. Using Endpoint Security Client
4. Configuring Policy Management
5. Common Configuration Settings
6. Configuring Access Protection policies
7. Configuring Exploit Prevention policies
8. Configuring On-Access Scan
9. Configuring On-Demand Scan
10. Configuring Threat Prevention Options
11. Configuring Adaptive Threat Protection
12. Firewall Overview and Configuring Firewall Options
13. Configuring Firewall Rules and Groups
14. Configuring Web Control
15. Monitoring and Reporting
16. Protection Workspace
17. Data Exchange Layer and Threat Intelligence
18. Configure Real-time Search
19. Investigating
20. Action History and Performance Metrics
21. Troubleshooting EDR