Investigations with FireEye Endpoint Security: Feb 12-13

This course covers the fundamentals of live analysis forensics and investigation for endpoints.

Hands-on activities span the entire forensics process, beginning with a FireEye-generated alert, leading to discovery and analysis of the host for evidence of malware and other unwanted intrusion. Analysis of computer systems will be performed using FireEye products and freely available tools.

For FireEye Endpoint Security (HX) customers, activities focus on investigation techniques using HX features such as the Triage Summary and Audit Viewer. Optionally, students can work with the HX API to automate actions and explore integrating HX with other systems.

Event Information

Training provided by: FireEye

• START DATE: February 12, 2020 9:00am IST
• END DATE: February 13, 2020 5:00pm IST
• LOCATION: ILT via WebEx. Details will be provided on successful registration.

- Expertise On Demand (EoD) credits will be accepted

Prerequisites

Students should have:

Completion of the Endpoint Security Deployment course. A working understanding of networking and network security, the Windows operating system, file system, registry and regular expressions, and experience scripting in Python.

Technical Requirements

Students must have access to a laptop running one of the following browsers: Chrome (latest), Firefox (latest), or Internet Explorer (10 or greater). Wireshark is recommended.

FireEye classes include hands-on activities in the FireEye Training Lab. Important: Students must be able to connect to the FireEye Training Lab. Please verify connectivity for the labs prior to the first day of class by visiting portal.ork.training.fireeye.com and portal.sfo.training.fireeye.com. You should see the lab login screens.

The lab is a protected environment and requires a login for access. Once registered for class, students will receive their training lab credentials via e-mail. These credentials will not be activated until the first day of class, and will expire upon class completion. Please note that any attempts to log in prior to class commencement will fail.