This Symantec Advanced Threat Protection - Incident Response training course is designed for the IT security professional in a Security Operations position. This course covers how to detect, investigate, remediate, and recover from an incident using Advanced Threat Protection.
By attending Symantec Advanced Threat Protection - Incident Response workshop, delegates will learn to:
- Describe Advanced Threat Protection products, components, dependencies, and system hierarchy.
- Configure Advanced Threat Protection to prepare your environment for responding to incidents.
- Detect events and incidents in the ATP Manager and search for indicators of compromise (IOC).
- Remediate threats by isolating breached endpoints and blacklisting suspicious files and addresses.
- Recover from an outbreak using Symantec best practices and update your Cybersecurity plan.
- Working knowledge of Symantec Endpoint Protection, Windows operating systems, endpoint and network security concepts.
The Symantec Advanced Threat Protection - Incident Response class is ideal for:
- Anyone who is charged with the configuration, day-to-day management, and incident response using Advanced Threat Protection and Symantec Endpoint Protection in a variety of network environments.