Traps: Deploy and Optimize (EDU-285) – Details

Detaillierter Kursinhalt

Module 1: Scaling Server Infrastructure

  • Small site architectures
  • Large site architectures
  • TLS/SSL deployment considerations
  • Installing and configuring the Linux agent

Module 2: Scaling Agent Deployment

  • Distributing Traps via GPO
  • Configuring Virtual Desktop Infrastructure with Traps

Module 3: ESM Tuning

  • Tuning ESM settings
  • External logging and SIEM integration
  • Role-based access control (RBAC)
  • Virtual groups
  • Defining conditions
  • Tuning policies
  • Implementing ongoing maintenance

Module 4: Windows Migrations for Traps

  • SQL database migration
  • SSL certificate migration

Module 5: Advanced Traps Forensics

  • Best practices for managing forensic data
  • Agent queries
  • Resources for malicious software testing
  • Exploit challenge testing with Metasploit
  • Exploit dump analysis with windbg

Module 6: Advanced Traps Troubleshooting

  • ESM and Traps architecture
  • Troubleshooting scenarios using dbconfig and cytool
  • Troubleshooting application compatibility and BITS connectivity