Course Outline
Introduction & Course Orientation
- Defining course objectives, expected outcomes, and setting up the lab environment
- Overview of EDR concepts and the OpenEDR platform architecture
- Comprehending endpoint telemetry and relevant data sources
OpenEDR Deployment
- Installing OpenEDR agents on Windows and Linux endpoints
- Establishing the OpenEDR server and configuring dashboards
- Setting up basic telemetry and logging mechanisms
Basic Detection and Alerting
- Understanding various event types and their relevance
- Defining detection rules and alert thresholds
- Monitoring alerts and system notifications
Event Analysis & Investigation
- Examining events to identify suspicious patterns
- Correlating endpoint behaviors with common attack techniques
- Utilizing OpenEDR dashboards and search tools for thorough investigation
Response & Mitigation
- Addressing alerts and suspicious activities
- Isolating compromised endpoints and mitigating threats
- Documenting actions taken and integrating findings into incident response
Integration & Reporting
- Connecting OpenEDR with SIEM or other security tools
- Producing reports for management and key stakeholders
- Applying best practices for continuous monitoring and alert tuning
Capstone Lab & Practical Exercises
- Hands-on lab simulating real-world endpoint threats
- Implementing detection, analysis, and response workflows
- Reviewing lab results and discussing key takeaways
Summary and Next Steps
Requirements
- Foundational knowledge of basic cybersecurity principles
- Practical experience in Windows and/or Linux administration
- Familiarity with endpoint protection or monitoring solutions
Target Audience
- IT and security specialists commencing their journey with endpoint detection tools
- Cybersecurity engineers
- Security personnel in small to mid-sized enterprises
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 2600 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.
