The FireEye Helix training course covers the Helix workflow, from triaging Helix alerts, creating and scoping cases and using Helix and Endpoint Security tools to conduct investigative searches across the enterprise.
By attending FireEye Helix workshop, delegates will learn to:
- Identify the components needed to deploy Helix
- Determine which data sources are most useful for Helix detection and investigation
- Locate and use critical information in a Helix alert to assess a potential threat
- Comfortably switch between the Helix web console to other FireEye interfaces
- Validate Network Security and Endpoint Security alerts
- Use specialized features of Network Security and Endpoint Security to investigate and respond to potential threats across enterprise systems and endpoints
- Working knowledge of networking and network security, the Windows operating system, file system, registry, and use of the CLI.
The FireEye Helix class is ideal for:
- Incident response team members, threat hunters and information security professionals.