Course description The course covers the functionality that Kaspersky Next EDR Optimum brings to the Next product line: • Kaspersky EDR Optimum response features; • Vulnerability and Patch Management; • Kaspersky Security for Microsoft Office 365, Cloud Discovery and Data Discovery. The theoretical part of the course and the hands-on labs provide the participants with the knowledge and skills needed to: • Respond to threats • Monitor and manage vulnerabilities, as well as Microsoft and 3rd party application updates • Protect corporate cloud-based resources: check data in transit and at res
Descripción
Duration
2 days
Requirements for participants
Basic understanding of Kaspersky Security Center.
Basic Windows and Linux management skills. Understanding of contemporary threats and information
technologies.
Сontents
1. Endpoint Detection and Response Optimum
Introduction
Containment
IoC scanning
Eradication
Lab 1
Lab 2
Lab 3
Lab 4
Preparing the environment
Preparing Endpoint Detection and Response Optimum for use
Incident response
Eradication
2. Vulnerability and Patch Management
Introduction
Search for vulnerabilities and required updates
Windows Update synchronization
How to install required updates and fix vulnerabilities
Installing software using the Kaspersky database of third-party applications
Monitoring
Integration with SIEM and other capabilities
Lab 5
Lab 6
Lab 7
Lab 8
Lab 9
Lab 10
Lab 11
Lab 12
How to scan for vulnerabilities and required updates
How to install critical Windows Updates on workstations
How to fix a vulnerability on various operating systems
How to install only approved updates for third-party software in a group of computers
How to automatically update all browsers on the client computers
How to fix vulnerabilities in all programs except, for example, Java
How to install all available third-party updates in a group of computers
How to install a third-party application using the Kaspersky database
3. Cloud Protection
Cloud Discovery
Kaspersky Security for Microsoft Office 365
Data Discovery