Cb Response Training

Cb Response Training

Register today to gain critical insight in Continuous Endpoint Visibility and Threat Detection; through confident use of Cb Response.

You must be a current customer with a pre-purchased training seat or a current partner to register.

Cb Response Training participants learn detailed best practices on how to identify and analyze potential vulnerabilities, detect advanced threats, and assess your organization’s risk. Learn how to configure Cb Response to gain real-time and historical visibility, leverage integrated threat intelligence feeds and identify indications of compromise gleaned from the Carbon Black Alliance.

There are five classes available:

  • Cb Response Administration Training is a one day, instructor-led course that covers installation, configuration, and administration.
  • Cb Response Advanced Administration Training is a one day, instructor-led course that builds on topics in the Administrator Training class, diving deeper into technical topics and advanced configuration settings.   Note: You must complete Cb Response Administration Training or Cb Response Introductory Analyst Skills before taking Cb Response Advanced Administration Training
  • Cb Response Introductory Analyst Skills Training is a one-day, instructor-led course that covers everyday best practices for analysts using Carbon Black Response.
  • Cb Response Advanced Analyst Skills Training includes hands-on labs which reinforce lessons learned for building effective queries, filters, watchlists, and investigations critical for process analysis and endpoint control. Note: You must complete Cb Response Administration Training or Cb Response Introductory Analyst Skills Training before taking Cb Response Advanced Analyst Skills Training.
  • Cb Response Cloud Training Bundle contains all topics from Cb Response Administration Training and Cb Response Advanced Administration Training that are relevant for Cb Response Cloud customers. The video library is composed of nine, self-paced modules, each concluding with a knowledge assessment, as well as an offline reference guide.

Sessions listed on this page are virtual training sessions, typically purchased with Cb Response. Private Training is available both in-person and virtually. Contact Sales for pricng information.

All sessions start at 9:00 a.m. and ends by 5:00 p.m. in their stated time zone.

Please read the Carbon Black Training Agreement before registering for a training class. All registrations are bound by these policies.

When your registration is processed, you will receive confirmation via email within two business days. If there are any issues processing your registration, you will be notified.

You also will receive two email messages two business days before your session. These will be from Carbon Black and Cloudshare containing course information and materials. If you believe you are registered and do not receive these two emails two business days prior to your session, please contact training@carbonblack.com as soon as possible.

Training

Class Overviews

Cb Response Administration Training – (one day course)

This one-day course will present you with a comprehensive view of the application’s capabilities, including the Carbon Black Alliance. You will see aspects of how an actual incident response investigation is conducted using Cb Response.

Extensive content addresses the User Interface and Query Language, giving you the skills and understanding you need to conduct focused searches that lead to valuable findings. You will learn to enable and set up Feeds, Alerts and Watchlists that can keep an eye out for both simple and complex query results.

You will be walked through a sample Cb Response installation, and learn about data collection from sensors, data aggregation and Carbon Black’s dynamic data storage capabilities. This leads naturally, to a review of server network communication and other critical data flows.

This one day instructor-led course provides a technical understanding of Cb Response through comprehensive coursework. Subjects include:

  • Key Concepts / Terminology
  • Prerequisites
  • Architecture / Data Flows
  • Installing the Server and Sensors
  • Configuration
  • Threat Intelligence / Alliance Feeds
  • Process Search / Process Analysis
  • Binary Search
  • Watchlists / Alerts
  • Dashboard
  • Network Isolation
  • Cb Live Response
  • Investigations
  • Administration
  • Advanced Query Skills
  • Customer Resources

Cb Response Advanced Administration Training – (one day course)

The Cb Response Advanced Administration Training Course requires completion of the Cb Response Administration Training course or the Cb Response Introductory Analyst Skill Training.

This one-day course is intended for Security Engineers who have the ability to directly access and manage their Cb Response server environment. Customers whose deployments are hosted in the Carbon Black Cloud and for whom the Carbon Black Cloud Operations Team handles all management activities are welcomed to attend; however, some topics may not be relevant.

This class will dive under Cb Response’s hood and take a look at the functionality and configuration of advanced components within Carbon Black and how to adjust Cb Response to suit the unique needs of an environment. Real world experiences of the vendor and other Cb Response users will also be incorporated. The overall purpose of this training is to enable the security engineer to take their organization’s Cb Response instance to that next level of customization, thus empowering SOC and IR teams to greater effectiveness. Note: This class focuses exclusively on advanced technical topics related to the technical backend configuration and maintenance of a Cb Response environment. Subjects include:

  • Advanced Architectural Design Considerations
  • Data Stores
  • API Programming
  • Intelligence Feed Deep Dive
  • SIEM Integration
  • Device Integration
  • Advanced Command Line Operations
  • Troubleshooting

This course is intended for Security Engineers who have the ability to directly access and manage their Cb Response server environment. Customers whose deployments are hosted in the Carbon Black Cloud and for whom the Carbon Black Cloud Operations Team handles all management activities are welcomed to attend; however, some topics may not be relevant.

Cb Response Introductory Analyst Skills Training – (one day course)

This introductory course is appropriate for Carbon Black Response users who are not primarily involved in the system set up or configuration but will use the system on a daily basis. Unlike the Advanced Analyst Skills course which follows a prescribed methodology for incident response, this introductory course covers everyday best practices for analysts using Carbon Black Response. This course would not be appropriate for anyone who has already taken the Cb Response Administration course and fulfills the required prerequisite for the Cb Response Advanced Analyst Skills course.

  • Architectural Overview
  • Process Search
  • Process Analysis
  • Binary Search
  • Querying Successfully
  • Threat Intelligence
  • Watchlists
  • Triage Alerts
  • Dashboard
  • Investigations
  • Isolation
  • Live Response
  • Sensor Groups and Settings
  • The API
  • Troubleshooting

Cb Response Advanced Analyst Skills Training – (one day course)

The Cb Response Advanced Analyst Skills Training Course requires completion of the Cb Response Administration Training course or Cb Response Introductory Analyst Skills Training.

Following the highly regarded PICERL methodology (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned), this one-day course traces each step in threat hunting and resolution through the Cb Response interface. Hands-on labs reinforce lessons learned and build familiarity building effective watchlists, queries and filters, process analysis, endpoint control, and investigations. Subjects include:

  • Cb Response + PICERL
  • Pre-Incident Operational Readiness
  • Incident Detection and Identification
  • Incident Containment & Scoping
  • Eradication & Removal of Malicious Artifacts
  • Recovery to Baseline
  • Lessons Learned & Enhancing Environmental Security Posture
On May 8th we will launch Cb Technical Academy
Carbon Black Training is undergoing a major transformation, the result of which will be a more responsive and streamlined registration and enrollment process as well as an expansion of our learning experiences. Training classes scheduled for May 22nd and later will be available through Cb Technical Academy on May 8th. Please stay tuned for more details.

Available Classes

Cb Response Administration Training

April 25, 2017 // 9:00 AM EDT // Cb Response Administrator Training
May 3, 2017 // 9:00 AM PDT // Cb Response Administrator Training
May 5, 2017 // 9:00 AM EDT // Cb Response Administrator Training
May 9, 2017 // 9:00 AM EDT // Cb Response Administrator Training
May 12, 2017 // 9:00 AM AEST // Cb Response Administrator Training
May 15, 2017 // 9:00 AM EDT // Cb Response Administrator Training
May 15, 2017 // 9:00 AM BST // Cb Response Administrator Training
May 18, 2017 // 9:00 AM PDT // Cb Response Administrator Training

Cb Response Advanced Administration Training

May 1, 2017 // 9:00 AM PDT // Cb Response Advanced Administrator Training
May 3, 2017 // 9:00 AM BST // Cb Response Advanced Administrator Training
May 16, 2017 // 9:00 AM AEST // Cb Response Advanced Administrator Training
May 16, 2017 // 9:00 AM EDT // Cb Response Advanced Administrator Training

Cb Response Introductory Analyst Skills

April 25, 2017 // 9:00 AM BST // Cb Response Introductory Analyst Skills Training
April 27, 2017 // 9:00 AM PDT // Cb Response Introductory Analyst Skills Training
May 5, 2017 // 9:00 AM EDT // Cb Response Introductory Analyst Skills Training
May 16, 2017 // 9:00 AM BST // Cb Response Introductory Analyst Skills Training
May 16, 2017 // 9:00 AM PDT // Cb Response Introductory Analyst Skills Training

Cb Response Advanced Analyst Skills

April 26, 2017 // 9:00 AM PDT // CB Response Advanced Analyst Skills
May 2, 2017 // 9:00 AM EDT // CB Response Advanced Analyst Skills
May 4, 2017 // 9:00 AM BST // CB Response Advanced Analyst Skills
May 19, 2017 // 9:00 AM PDT // CB Response Advanced Analyst Skills