RSA NetWitness Endpoint Foundations with RSA University

Video created by Patricia Chagnon Employee on Jun 13, 2019

    Evolved SIEM & Threat Defense with RSA NetWitness Platform, brought to you by RSA University _________________________________________________________________

     

    Course Outline

    • Module 1 – What is NetWitness Endpoint?  
          
      • The ‘Enterprise Compromise Assessment Tool’
      •   
      • Endpoint visibility
      •   
      • Analytical tools
      •   
      • Scan requests
      •  
    • Module 2 – Architecture Overview  
          
      • Overview
      •   
      • NetWitness Endpoint server
      •   
      • NetWitness Endpoint database
      •   
      • Endpoints
      •   
      • Key directories
      •  
    • Module 3 – ECAT Modules  
          
      • Module interface
      •   
      • Filters
      •   
      • Daily responsibilities
      •   
      • Indicators of compromise (IOC)
      •   
      • Types of malicious modules
      •  
    • Module 4 – ECAT Machines  
          
      • Interface
      •   
      • Status
      •   
      • View customization
      •   
      • Groups
      •   
      • Agent maintenance
      •  
    • Module 5 – Analysis Basics  
          
      • Threat assessment
      •   
      • Signatures and recognition
      •   
      • Characteristics and behavior
      •   
      • Context
      •  

     

    To learn more about the RSA NetWitness Endpoint Foundations course, please visit this page for full course description and registration information.