Projects
Assignments
Overview
Cortex XDR: Prevention and Deployment – This three-day, instructor-led course, featuring hands-on labs, equips security operations professionals with the skills needed to deploy, configure, and manage Cortex XDR. Participants will learn to set up and optimize Cortex XDR agents, build prevention profiles, investigate alerts, and perform troubleshooting to enhance endpoint security.
Objectives
By the end of this course, leaner will be able to:
- Describe the architecture and components of the Cortex XDR solution and its management console.
- Configure and deploy Cortex XDR agents on endpoints and create endpoint groups.
- Create and manage exploit and malware prevention profiles to strengthen security.
- Investigate and prioritize alerts, tuning security profiles as needed.
- Perform response actions, troubleshoot agents, and deploy a Broker VM.
Prerequisites
- Basic understanding of endpoint security concepts.
- Familiarity with malware prevention and threat detection practices.
- Experience with endpoint protection or security management systems.
- Knowledge of Windows or Linux operating systems.
- Understanding of network fundamentals and endpoint configurations.
Course Outline
Module 1 : Introduction to Cortex XDRCourses2024-11-09T06:41:18+05:30
- Overview of Cortex XDR components, architecture, and deployment scenarios.
Module 2 : Cortex XDR Management ConsoleCourses2024-11-09T06:42:10+05:30
- Exploring the management console for reporting, creating endpoint groups, and policy management.
Module 3 : Agent Deployment and ConfigurationCourses2024-11-09T06:42:54+05:30
- Hands-on creation of installation packages and deployment of agents on endpoints, with configuration of Exploit and Malware Prevention profiles.
Module 4 : Alert Investigation and ManagementCourses2024-11-09T06:43:39+05:30
- Techniques for investigating and prioritizing alerts, utilizing starring and exclusion policies for effective threat management.
Module 5 : Troubleshooting and Advanced ConfigurationsCourses2024-11-09T06:44:33+05:30
- Performing basic troubleshooting, deploying a Broker VM, and using the Local Agents Settings applet.
