Register today to gain critical insight in Continuous Endpoint Visibility and Threat Detection; through confident use of Cb Response.
You must be a current customer with a pre-purchased training seat or a current partner to register.
Cb Response Training participants learn detailed best practices on how to identify and analyze potential vulnerabilities, detect advanced threats, and assess your organization’s risk. Learn how to configure Cb Response to gain real-time and historical visibility, leverage integrated threat intelligence feeds and identify indications of compromise gleaned from the Carbon Black Alliance.
There are five classes available:
Sessions listed on this page are virtual training sessions, typically purchased with Cb Response. Private Training is available both in-person and virtually. Contact Sales for pricng information.
All sessions start at 9:00 a.m. and ends by 5:00 p.m. in their stated time zone.
Please read the Carbon Black Training Agreement before registering for a training class. All registrations are bound by these policies.
When your registration is processed, you will receive confirmation via email within two business days. If there are any issues processing your registration, you will be notified.
You also will receive two email messages two business days before your session. These will be from Carbon Black and Cloudshare containing course information and materials. If you believe you are registered and do not receive these two emails two business days prior to your session, please contact firstname.lastname@example.org as soon as possible.
This one-day course will present you with a comprehensive view of the application’s capabilities, including the Carbon Black Alliance. You will see aspects of how an actual incident response investigation is conducted using Cb Response.
Extensive content addresses the User Interface and Query Language, giving you the skills and understanding you need to conduct focused searches that lead to valuable findings. You will learn to enable and set up Feeds, Alerts and Watchlists that can keep an eye out for both simple and complex query results.
You will be walked through a sample Cb Response installation, and learn about data collection from sensors, data aggregation and Carbon Black’s dynamic data storage capabilities. This leads naturally, to a review of server network communication and other critical data flows.
This one day instructor-led course provides a technical understanding of Cb Response through comprehensive coursework. Subjects include:
The Cb Response Advanced Administration Training Course requires completion of the Cb Response Administration Training course or the Cb Response Introductory Analyst Skill Training.
This one-day course is intended for Security Engineers who have the ability to directly access and manage their Cb Response server environment. Customers whose deployments are hosted in the Carbon Black Cloud and for whom the Carbon Black Cloud Operations Team handles all management activities are welcomed to attend; however, some topics may not be relevant.
This class will dive under Cb Response’s hood and take a look at the functionality and configuration of advanced components within Carbon Black and how to adjust Cb Response to suit the unique needs of an environment. Real world experiences of the vendor and other Cb Response users will also be incorporated. The overall purpose of this training is to enable the security engineer to take their organization’s Cb Response instance to that next level of customization, thus empowering SOC and IR teams to greater effectiveness. Note: This class focuses exclusively on advanced technical topics related to the technical backend configuration and maintenance of a Cb Response environment. Subjects include:
This course is intended for Security Engineers who have the ability to directly access and manage their Cb Response server environment. Customers whose deployments are hosted in the Carbon Black Cloud and for whom the Carbon Black Cloud Operations Team handles all management activities are welcomed to attend; however, some topics may not be relevant.
This introductory course is appropriate for Carbon Black Response users who are not primarily involved in the system set up or configuration but will use the system on a daily basis. Unlike the Advanced Analyst Skills course which follows a prescribed methodology for incident response, this introductory course covers everyday best practices for analysts using Carbon Black Response. This course would not be appropriate for anyone who has already taken the Cb Response Administration course and fulfills the required prerequisite for the Cb Response Advanced Analyst Skills course.
The Cb Response Advanced Analyst Skills Training Course requires completion of the Cb Response Administration Training course or Cb Response Introductory Analyst Skills Training.
Following the highly regarded PICERL methodology (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned), this one-day course traces each step in threat hunting and resolution through the Cb Response interface. Hands-on labs reinforce lessons learned and build familiarity building effective watchlists, queries and filters, process analysis, endpoint control, and investigations. Subjects include: