Powering Security Operations with Cisco XDR (ESOXDR)
The Powering Security Operations with Cisco XDR (ESOXDR) 3-day training guides you through the main aspects and challenges of traditional SOC.
The Powering Security Operations with Cisco XDR (ESOXDR) 3-day training guides you through the main aspects and challenges of traditional SOC.
More Information:
- Learning Style: Virtual
- Provider: Cisco
- Difficulty: Intermediate
- Course Duration: 3 Days
- CLC: 30 Units
- Course Info: Download PDF
- Certificate: See Sample
Need Training for 5 or More People?
Customized to your team's need:
- Annual Subscriptions
- Private Training
- Flexible Pricing
- Enterprise LMS
- Dedicated Customer Success Manager
Course Information
About this Course:
The Powering Security Operations with Cisco XDR (ESOXDR) 3-day training guides you through the main aspects and challenges of traditional SOC. You will learn the Cisco XDR security platform and how it can simplify security operations in today's hybrid, multi-vendor, multi-threat landscape. Overview of all the main integration possibilities and components, including APIs discovery, Endpoint and Network Telemetry and ITSM, SIEM systems, and Public Cloud. Through expert instruction and hands-on lab exercises, you will learn how to read the components and work with Incident Manager for effective threat prioritization, streamlined investigations, and evidence-backed recommendations. In this training, you will discover how to elevate productivity with automation capabilities and boost your security resources for optimal value.
Course Objectives:
- Understand the architecture of Cisco Secure Client/XDR.
- Understand the Identification, Containment, Eradication, and Recovery Workflows.
- Understand the XDR Remote Connector and how to accomplish arbitrary integrations.
- Learn how to create automation using Automation APIs.
- Recognize the types and sequence of Orchestration Workflows.
- Understand the fundamentals of working with Public Cloud through XDR Orchestration.
- Explain how to initiate Cisco XDR investigations from Splunk.
Audience:
- Cisco integrators, resellers, and partners
- Network administrators
- Security administrators
- Security consultants
- Systems engineers
- Cybersecurity engineers
- Cybersecurity investigators
- SOC analysts
- Network design engineers
- Solution architects
Prerequisites:
The knowledge and skills that the learner should have before attending this course are as follows:
- Working knowledge of the Windows and Linux operating systems.
- Familiarity with basics of networking security concepts.
- Technical understanding of TCP/IP networking and network architecture.
- Technical understanding of security concepts and protocols.
The recommended Cisco offering may help you meet these prerequisites:
- Implementing and Administering Cisco Solutions (CCNA)
