CrowdStrike: Zero to Falcon Admin

CrowdStrike: Zero to Falcon Admin | Udemy
English | Size: 1.63 GB
Genre: eLearning

Master the Falcon Platform from an Administrative Perspective

What you’ll learn
Pass the CrowdStrike Certified Falcon Administrator (CCFA) exam!
Gain mastery of the Falcon platform: Learn how to navigate and use the various features of the CrowdStrike Falcon platform related to administrative duties.
Learn the core principles of endpoint protection, including deployment, host management, troubleshooting, and response.
Learn best practices for security operations: Gain an understanding of industry-standard security practices and how to apply them to your organization.

This course is designed to provide learners with an in-depth understanding of CrowdStrike/EDR, a powerful endpoint security tool. Participants will learn how to install and configure CrowdStrike/EDR, manage hosts, create and manage prevention policies, customize IOAs, manage exclusions and quarantines, and troubleshoot issues. Additionally, this course includes an exam preparation module that will equip learners with the knowledge and skills needed to pass the certification exam.

Module 1: What is CrowdStrike/EDR

Introduction to CrowdStrike/EDR
Understanding Endpoint Detection and Response (EDR)
Key features and benefits of CrowdStrike/EDR

Module 2: Users and Roles

User and role management in CrowdStrike/EDR
Understanding permissions and access levels
Best practices for user and role management

Module 3: Installation

CrowdStrike/EDR installation prerequisites
Installing CrowdStrike/EDR on endpoints
Post-installation configurations and best practices

Module 4: Troubleshooting

Troubleshooting common issues with CrowdStrike/EDR
Best practices for effective troubleshooting

Module 5: Uninstalling & Sensor updates

Uninstalling CrowdStrike/EDR from endpoints
Updating CrowdStrike/EDR sensors
Best practices for sensor management

Module 6: Host management

Managing hosts using CrowdStrike/EDR
Understanding host groups and policies
Best practices for host management

Module 7: Prevention policies

Creating and managing prevention policies in CrowdStrike/EDR
Understanding policy rules and configurations
Best practices for policy management

Module 8: Custom IOAs

Creating custom Indicators of Attack (IOAs) in CrowdStrike/EDR
Understanding IOA rules and configurations
Best practices for custom IOA management

Module 9: Exclusions and Quarantines

Managing exclusions and quarantines in CrowdStrike/EDR
Understanding exclusion and quarantine rules and configurations
Best practices for exclusion and quarantine management

Module 10: Exam Preparation

Preparing for the CrowdStrike/EDR certification exam

Target audience: IT professionals, cybersecurity professionals, system administrators, and anyone interested in learning how to manage and secure endpoints using CrowdStrike/EDR.

Who this course is for:

Learners should have a basic understanding of cybersecurity principles and some experience with endpoint security management. They should also have a working knowledge of operating systems, networking, and cybersecurity concepts.
Professionals wanting to advance their understanding of EDR tools
IT professionals, cybersecurity professionals, system administrators, and anyone interested in learning how to manage and secure endpoints using CrowdStrike/EDR.