FortiNDR Cloud Analyst (NSE 6)
FT-FNDRCA
FortiNDR Cloud Analyst (NSE 6)
Price:
Duration:
USD 1,800 excl. VAT
2 Days
Who Should Attend
Security professionals involved in the day-to-day management and monitoring of
FortiNDR Cloud
should attend this course.
Course Content
In this course, you will learn the fundamentals of using FortiNDR Cloud. You will learn how to identify
and investigate detections and indicators of compromise using the tools available on FortiNDR Cloud.
Prerequisites
You must have knowledge of networking,
cybersecurity, and SOC concepts.
Course Objectives
After completing this course, you will be able to:
• Describe FortiNDR Cloud architecture
• Navigate the FortiNDR Cloud portal
• Identify the sensor types
• Describe metadata production
• Describe event types and fields
• Describe core IQL concepts
• Describe detections
• Explain behavioral observations
• Describe how to write a query
• Describe how to tune a detector
• Describe investigations
• Identify supported integrations
• Describe the essentials solution pack
• Explain the Fortinet Automation Service benefits
• Explain threat hunting concepts
Course Outline
1. Introduction
2. Sensors
3. Events
4. Internal Query Language
5. Detections
6. Creating Decetors
7. Investigations
8. Integrations
9. Threat Hunting Supplement
Further information
If you would like to know more about this course please contact us
