Cybereason Training

Topics:

• Overview of endpoint protection and detection concepts
• Evolving threat landscape: Why EPP + XDR?
• Cybereason architecture and components
• Topics like Prevention, detection, investigation, and response
• Deployment models (on-prem, cloud, hybrid)

Topics:

• Anti-malware, ransomware protection
• Exploit prevention & fileless attack defense
• Behavioral detection vs. signature-based detection

Topics:

• Installing Cybereason sensors/agents
• Policy configuration (anti-virus, anti-ransomware, exploit protection)
• Device control and application control

Topics:

• Differences between EDR, MDR, and XDR
• Role of XDR in SOC operations
• XDR Capabilities
• Multi-vector correlation (endpoint, cloud, email, network)
• Threat hunting and detection techniques
• Incident response workflows

Topics:

• Understanding Cybereason MalOp™ (Malicious Operations)
• Real-time detection and alert triage
• Threat hunting with Cybereason XDR
• Automating responses and remediation steps
• Integration with SOAR & SIEM platforms
• Lab: Detect and remediate simulated attacks

Topics:

• Forensic investigation and root cause analysis
• Integration with third-party security tools (SIEM, SOAR, Threat Intelligence)
• Custom rules and detection logic
• Advanced reporting and dashboards
• Performance tuning and optimization

Topics:

• User roles and access management
• Policy lifecycle management
• Patch and update management
• Compliance considerations
• Best practices for EPP + XDR deployment in enterprises

Topics:

• Case study: Ransomware attack detection and response
• Case study: Fileless malware attack investigation
• Blue team vs. red team simulation
• Final capstone lab: End-to-end incident detection, investigation, and remediation