Опис курсу
Cisco XDR Security Operations (XDROPS) is a 3-day training guiding you through the main aspects and challenges of traditional SOC. You will learn the Cisco XDR security platform and how it can simplify security operations in today's hybrid, multi-vendor, multi-threat landscape. Overview of all the main integration possibilities and components, including APIs discovery, Endpoint and Network Telemetry and ITSM, SIEM systems, and Public Cloud. Through expert instruction and hands-on lab exercises, you will learn how to read the components and work with Incident Manager for effective threat prioritization, streamlined investigations, and evidence-backed recommendations. In this training, you will discover how to elevate productivity with automation capabilities and boost your security resources for optimal value.
Попередні вимоги
The knowledge and skills that the learner should have before attending this course are as follows:
- Working knowledge of the Windows and Linux operating systems.
- Familiarity with basics of networking security concepts.
- Technical understanding of TCP/IP networking and network architecture.
- Technical understanding of security concepts and protocols.
The recommended Cisco offering may help you meet these prerequisites:
- Implementing and Administering Cisco Solutions (CCNA)
Цілі курсу
Upon completing this course, the learner will be able to meet these overall objectives:
- Understand the architecture of Cisco Secure Client/XDR.
- Understand the Identification, Containment, Eradication, and Recovery Workflows.
- Understand the XDR Remote Connector and how to accomplish arbitrary integrations.
- Learn how to create automation using Automation APIs.
- Recognize the types and sequence of Orchestration Workflows.
- Understand the fundamentals of working with Public Cloud through XDR Orchestration.
- Explain how to initiate Cisco XDR investigations from Splunk.