Cb Response Training

Cb Response Training

Register today to gain critical insight in Continuous Endpoint Visibility and Threat Detection; through confident use of Cb Response.

You must be a current customer with a pre-purchased training seat or a current partner to register.

Cb Response Training participants learn detailed best practices on how to identify and analyze potential vulnerabilities, detect advanced threats, and assess your organization’s risk. Learn how to configure Cb Response to gain real-time and historical visibility, leverage integrated threat intelligence feeds and identify indications of compromise gleaned from the Carbon Black Alliance.

There are five classes available:

  • Cb Response Administration Training is a one day, instructor-led course that covers installation, configuration, and administration.
  • Cb Response Advanced Administration Training is a one day, instructor-led course that builds on topics in the Administrator Training class, diving deeper into technical topics and advanced configuration settings.   Note: You must complete Cb Response Administration Training or Cb Response Introductory Analyst Skills before taking Cb Response Advanced Administration Training
  • Cb Response Introductory Analyst Skills Training is a one-day, instructor-led course that covers everyday best practices for analysts using Carbon Black Response.
  • Cb Response Advanced Analyst Skills Training includes hands-on labs which reinforce lessons learned for building effective queries, filters, watchlists, and investigations critical for process analysis and endpoint control. Note: You must complete Cb Response Administration Training or Cb Response Introductory Analyst Skills Training before taking Cb Response Advanced Analyst Skills Training.
  • Cb Response Cloud Training Bundle contains all topics from Cb Response Administration Training and Cb Response Advanced Administration Training that are relevant for Cb Response Cloud customers. The video library is composed of nine, self-paced modules, each concluding with a knowledge assessment, as well as an offline reference guide.

Sessions listed on this page are virtual training sessions, typically purchased with Cb Response. Private Training is available both in-person and virtually. Contact Sales for pricng information.

All sessions start at 9:00 a.m. and ends by 5:00 p.m. in their stated time zone.

Please read the Carbon Black Training Agreement before registering for a training class. All registrations are bound by these policies.

When your registration is processed, you will receive confirmation via email within two business days. If there are any issues processing your registration, you will be notified.

You also will receive two email messages two business days before your session. These will be from Carbon Black and Cloudshare containing course information and materials. If you believe you are registered and do not receive these two emails two business days prior to your session, please contact training@carbonblack.com as soon as possible.

Training

Class Overviews

Cb Response Administration Training – (one day course)

This one-day course will present you with a comprehensive view of the application’s capabilities, including the Carbon Black Alliance. You will see aspects of how an actual incident response investigation is conducted using Cb Response.

Extensive content addresses the User Interface and Query Language, giving you the skills and understanding you need to conduct focused searches that lead to valuable findings. You will learn to enable and set up Feeds, Alerts and Watchlists that can keep an eye out for both simple and complex query results.

You will be walked through a sample Cb Response installation, and learn about data collection from sensors, data aggregation and Carbon Black’s dynamic data storage capabilities. This leads naturally, to a review of server network communication and other critical data flows.

This one day instructor-led course provides a technical understanding of Cb Response through comprehensive coursework. Subjects include:

  • Key Concepts / Terminology
  • Prerequisites
  • Architecture / Data Flows
  • Installing the Server and Sensors
  • Configuration
  • Threat Intelligence / Alliance Feeds
  • Process Search / Process Analysis
  • Binary Search
  • Watchlists / Alerts
  • Dashboard
  • Network Isolation
  • Cb Live Response
  • Investigations
  • Administration
  • Advanced Query Skills
  • Customer Resources

Cb Response Advanced Administration Training – (one day course)

The Cb Response Advanced Administration Training Course requires completion of the Cb Response Administration Training course or the Cb Response Introductory Analyst Skill Training.

This one-day course is intended for Security Engineers who have the ability to directly access and manage their Cb Response server environment. Customers whose deployments are hosted in the Carbon Black Cloud and for whom the Carbon Black Cloud Operations Team handles all management activities are welcomed to attend; however, some topics may not be relevant.

This class will dive under Cb Response’s hood and take a look at the functionality and configuration of advanced components within Carbon Black and how to adjust Cb Response to suit the unique needs of an environment. Real world experiences of the vendor and other Cb Response users will also be incorporated. The overall purpose of this training is to enable the security engineer to take their organization’s Cb Response instance to that next level of customization, thus empowering SOC and IR teams to greater effectiveness. Note: This class focuses exclusively on advanced technical topics related to the technical backend configuration and maintenance of a Cb Response environment. Subjects include:

  • Advanced Architectural Design Considerations
  • Data Stores
  • API Programming
  • Intelligence Feed Deep Dive
  • SIEM Integration
  • Device Integration
  • Advanced Command Line Operations
  • Troubleshooting

This course is intended for Security Engineers who have the ability to directly access and manage their Cb Response server environment. Customers whose deployments are hosted in the Carbon Black Cloud and for whom the Carbon Black Cloud Operations Team handles all management activities are welcomed to attend; however, some topics may not be relevant.

Cb Response Introductory Analyst Skills Training – (one day course)

This introductory course is appropriate for Carbon Black Response users who are not primarily involved in the system set up or configuration but will use the system on a daily basis. Unlike the Advanced Analyst Skills course which follows a prescribed methodology for incident response, this introductory course covers everyday best practices for analysts using Carbon Black Response. This course would not be appropriate for anyone who has already taken the Cb Response Administration course and fulfills the required prerequisite for the Cb Response Advanced Analyst Skills course.

  • Architectural Overview
  • Process Search
  • Process Analysis
  • Binary Search
  • Querying Successfully
  • Threat Intelligence
  • Watchlists
  • Triage Alerts
  • Dashboard
  • Investigations
  • Isolation
  • Live Response
  • Sensor Groups and Settings
  • The API
  • Troubleshooting

Cb Response Advanced Analyst Skills Training – (one day course)

The Cb Response Advanced Analyst Skills Training Course requires completion of the Cb Response Administration Training course or Cb Response Introductory Analyst Skills Training.

Following the highly regarded PICERL methodology (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned), this one-day course traces each step in threat hunting and resolution through the Cb Response interface. Hands-on labs reinforce lessons learned and build familiarity building effective watchlists, queries and filters, process analysis, endpoint control, and investigations. Subjects include:

  • Cb Response + PICERL
  • Pre-Incident Operational Readiness
  • Incident Detection and Identification
  • Incident Containment & Scoping
  • Eradication & Removal of Malicious Artifacts
  • Recovery to Baseline
  • Lessons Learned & Enhancing Environmental Security Posture
Contact the Carbon Black Training Team
Can’t find the course you want? Can’t find the course you want when you need it? Please click “Contact Us” to send an email message to the Training Team.

Available Classes

Cb Response Administration Training

January 25, 2017 // 9:00 AM EST // Cb Response Administrator Training
January 31, 2017 // 9:00 AM EST // Cb Response Administrator Training
February 6, 2017 // 9:00 AM EST // Cb Response Administrator Training
February 7, 2017 // 9:00 AM GMT // Cb Response Administrator Training
February 14, 2017 // 9:00 AM EST // Cb Response Administrator Training
February 15, 2017 // 9:00 AM PST // Cb Response Administrator Training
February 16, 2017 // 10:00 AM SGT // Cb Response Administrator Training
February 22, 2017 // 9:00 AM EST // Cb Response Administrator Training
February 27, 2017 // 9:00 AM EST // Cb Response Administrator Training
March 1, 2017 // 9:00 AM PST // Cb Response Administrator Training
March 7, 2017 // 9:00 AM GMT // Cb Response Administrator Training

Cb Response Advanced Administration Training

January 26, 2017 // 9:00 AM GMT // Cb Response Advanced Administrator Training
January 31, 2017 // 9:00 AM PST // Cb Response Advanced Administrator Training
February 10, 2017 // 9:00 AM EST // Cb Response Advanced Administrator Training
February 16, 2017 // 9:00 AM GMT // Cb Response Advanced Administrator Training
February 23, 2017 // 9:00 AM PST // Cb Response Advanced Administrator Training
February 23, 2017 // 10:00 AM SGT // Cb Response Advanced Administrator Training
March 2, 2017 // 9:00 AM EST // Cb Response Advanced Administrator Training
March 7, 2017 // 9:00 AM GMT // Cb Response Advanced Administrator Training

Cb Response Introductory Analyst Skills

January 24, 2017 // 9:00 AM EST // Cb Response Introductory Analyst Skills Training
February 3, 2017 // 9:00 AM GMT // Cb Response Introductory Analyst Skills Training
February 6, 2017 // 9:00 AM PST // Cb Response Introductory Analyst Skills Training
February 15, 2017 // 9:00 AM EST // Cb Response Introductory Analyst Skills Training
February 24, 2017 // 9:00 AM GMT // Cb Response Introductory Analyst Skills Training
February 27, 2017 // 9:00 AM PST // Cb Response Introductory Analyst Skills Training
March 8, 2017 // 9:00 AM EST // Cb Response Introductory Analyst Skills Training

Cb Response Advanced Analyst Skills

January 23, 2017 // 9:00 AM EST // CB Response Advanced Analyst Skills
January 27, 2017 // 9:00 AM GMT // CB Response Advanced Analyst Skills
February 2, 2017 // 9:00 AM PST // CB Response Advanced Analyst Skills
February 8, 2017 // 9:00 AM GMT // CB Response Advanced Analyst Skills
February 13, 2017 // 9:00 AM EST // CB Response Advanced Analyst Skills
February 21, 2017 // 9:00 AM PST // CB Response Advanced Analyst Skills
February 28, 2017 // 9:00 AM GMT // CB Response Advanced Analyst Skills
March 8, 2017 // 9:00 AM EST // CB Response Advanced Analyst Skills