COURSE LIST / COURSE BY TECHNOLOGY VENDORS / VMWARE

VMware Carbon Black Cloud Audit and Remediation

Course Summary:

This one-day course teaches you how to use the VMware Carbon Black® Cloud Audit and Remediation™ product to build queries for IT hygiene, incident response, and vulnerability assessment to support your organization’s security posture and policies. This course provides an in-depth, technical understanding of the product through comprehensive coursework and hands-on scenario-based labs.

Course Duration: 1 day

Course Content:

1 Course Introduction

Introductions and course logistics
Course objectives

2 Data Flows and Communication

Hardware and software requirements
Architecture
Data flows

3 Query Basics

osquery
Available tables
Query scope
Running versus scheduling

4 Recommended Queries

Use cases
Inspecting the SQL query

5 SQL Basics

Components
Tables
Select statements
Where clause
Creating basic queries

6 Filtering Results

Where clause
Exporting and filtering

7 Basic SQL Queries

Query creation
Running queries
Viewing results

8 Advanced Search Capabilities

Advanced SQL options
Threat hunting

9 Response Capabilities

Using live response