VMware Carbon Black EDR Advanced Administrator - Available on Demand Format

Course Overview

This one-day course teaches you how to use the advanced features of the VMware Carbon Black® EDR™ product. This usage includes gaining access to the Linux server for management and troubleshooting in addition to configuring integrations and using the API. This course provides an in-depth, technical understanding of the Carbon Black EDR product through comprehensive coursework and hands-on scenario-based labs. This class focuses exclusively on advanced technical topics related to the technical back-end configuration and maintenance.

Product Alignment

  • VMware Carbon Black EDR

After completing this course, students will be able to:

  • Describe the components and capabilities of the Carbon Black EDR server
  • Identify the architecture and data flows for Carbon Black EDR communication
  • Identify the architecture for a cluster configuration and Carbon Black EDR cluster communication
  • Describe the Carbon Black EDR server data types and data locations
  • Use the API to interact with the Carbon Black EDR server without using the UI
  • Create custom threat feeds for use in the Carbon Black EDR server
  • Perform the integration with a syslog server
  • Use different server-side scripts for troubleshooting
  • Troubleshoot sensor-side configurations and communication

Upcoming Batches

India Online Enroll
Start Date End Date

To be Decided

Key Features

  • Our training modules have 50% -60% hands-on lab sessions to encourage Thinking-Based Learning (TBL).
  • Interactive-rich virtual and face-to-face classroom teaching to inculcate Problem-Based Learning (PBL).
  • VMware certified instructor-led training and mentoring sessions to develop Competency-Based Learning (CBL).
  • Well-structured use-cases to simulate challenges encountered in a Real-World environment.
  • Integrated teaching assistance and support through experts designed Learning Management System (LMS) and ExamReady platform.
  • Being a VMware Authorized Training Reseller, we offer authored curriculum that are at par with industry standards.

Who Should Attend

  • System administrators and security operations personnel, including analysts and managers.

Prerequisites

This course requires completion of the following course:

  • VMware Carbon Black EDR Administrator
  • Course Outline Download Course Outline

    • Introductions and course logistics
    • Course objectives

    • Data flows and channels
    • Sizing considerations
    • Communication channels and ports

    • SOLR database
    • Storage configurations and data aging
    • Partition states
    • Postgres
    • Modulestore

    • CBAPI overview
    • Viewing API calls in the browser
    • Utilizing the API to access data

    • Feed structure
    • Report indicator types
    • Custom threat feed creation and addition

    • SIEM support
    • Configuration

    • Server-side scripts
    • Server logs
    • Sensor operations

    Certification

      • By earning this certification, you Learn the advanced features of the VMware Carbon Black® EDR™ product.
      • You gain expertise in accessing the Linux server for management and troubleshooting and also get mastery in configuring integrations and usage of the APIs.
      • Also, gain knowledge of advanced concepts in the technical back-end configuration and maintenance.
      • On successful completion of this training aspirants receive a Course Completion Certificate from us.
      • By successfully clearing the VMware Carbon Black EDR Administrator exam, aspirants earn VMware Certification.

    Our Top Trainers

    Course Fee

      Select Course date

      Add to Wishlist

      Course ID: 10077

      Course Price at

      ₹ 19900 + 18% GST

      Enroll Now