Endpoint Detection and Response with Forensics - SaaS Administration

Course Length:

4 days

Overview:

This course provides IT Administrators, Security Analysts, and Incident Responders with the specialized knowledge required to deploy, configure, and utilize the Trellix EDRF ecosystem. The curriculum focuses on the integration of traditional EDR capabilities with deep-dive forensic artifacts.

Key highlights include:

• The leverage of Trellix Wise for automated investigations
• The utilization of enhanced forensic collection modules (Command Shell, PowerShell, and Full Memory acquisition)
• The implementation of advanced remediation workflows

Participants will learn to move beyond simple alert monitoring to proactive threat hunting using the specialized Endpoint Detection and Response and Forensics Workspaces.

Who Should Attend:

This course is intended for IT Administrators, Security Analysts, and Incident Responders concerned with system endpoint security.

To learn more about this course, or to schedule a private session for your team, contact your Trellix account manager.

Download PDF Course Data Sheet