025.35
Onsite Training
Kurs anfragen- Home
- Training
- Kaspersky Lab
- 025.35
Kaspersky Anti Targeted Attack Platform, Kaspersky Endpoint Detection and Response (025.35)
Course Overview
The main aim of this course is to provide all know-how required to plan, deploy, configure, and demonstrate the solution.
Who should attend
The course is aimed at presale engineers who work with Kaspersky Anti Targeted Attack Platform and Kaspersky Endpoint Detection and Response.
Prerequisites
Basic understanding of networking technologies: DNS, routing, email, Web. Knowledge of IT technologies and information security, understanding of malware and contemporary threats. Basic Windows and Linux managing skills
Course Content
Introduction
- 1. Threat landscape
- 2. Kaspersky Threat Management and Defense
- 3. Deployment planning
Unit 1. Installing KATA for traffic analysis
- 1. Sandbox installation
- 2. Central Node / Sensor installation
- 3. Connecting KATA servers
- 4. Post-installation
- 5. Connecting Sensors to the infrastructure
- 6. Managing alerts from traffic
Unit 2. Endpoint Sensors, TAA, and EDR
- 1. Deploying Endpoint Sensors
- 2. Managing alerts from Targeted Attack Analyzer
- 3. Activating Endpoint Detection and Response
- 4. Using EDR tools
Unit 3. Maintenance and monitoring
- 1. Alerts and notifications
- 2. VIP group and exclusions
- 3. Dashboards and reports
- 4. Logs and integration with SIEM
Unit 4. Distributed installation
- 1. Activating PCN and connecting SCN
- 2. Centralized management
Unit 5. Integrating with KPSN, KSMG, and 3rd-party sensors
- 1. Central Node integration with KPSN
- 2. Connecting KSMG
- 3. Sending files via API
Derzeit gibt es keine Trainingstermine für diesen Kurs. Termin anfragen