GLAB – Kaspersky Bootcamp ( 3- EDR Optimum )

– 在本课程中，学生将能够安装 Kaspersky Endpoint Detection & Response Optimum 并发现它的主要功能。

– Endpoint Protection Platform 将与端点检测和响应进行比较，并发现后者的主要优势。

– 端点检测和响应优化是一个由两个主要应用程序组成的解决方案（端点代理和卡巴斯基端点安全“低于 11.6 版”或卡巴斯基混合云或卡巴斯基 Windows 服务器）。

– 在新版本的卡巴斯基端点安全表单 11.7 及更高版本中，端点代理成为平台的一部分，用户不必单独安装这两个应用程序并在它们之间集成。

– 在本课程中，我们将使用 kaspersky security center “Web 控制台”，因为我们使用的是 EDR，结果不会显示在 Web 控制台中。

– 我们还将了解如何通过两种方法安装解决方案（更改应用程序组件或直接编辑应用程序设置）。

– 然后我们将发现 EDR 优化的所有功能，例如发现威胁可以在机器上创建的所有文件、网络连接、注册表。

– 还将讨论响应，例如（主机隔离；将 pc 与网络完全隔离.. 执行预防；防止威胁形式开始执行.. IOC 扫描；在网络中的其他 pc 上搜索特定的 md5 哈希..

( Endpoint Security ) Kaspersky Endpoint Detection And Response Optimum Installed And Configured

Last Updated 07/2022
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 8 lectures (1h 59m) | Size: 1.23 GB

What you’ll learn

Comparing Between EPP & EDR Solutions And What Are Main Advantages Of EDR Over EPP
Differentiate Between Version Of Kaspersky KES With EDR Optimum , How To Install Each
Working With Kaspersky Web Console And Investigate Incident Cards With EDR Optimum
Perform Host Isolation , Execution Prevention , Analysis Of Files , Network Connections And IOC Scans

Requirements
– Systems Basics
– Networks Basics
– Security Basics

Description
– During This Course Student will be able to install Kaspersky Endpoint Detection & Response Optimum and dicover it’s main features .

– Endpoint Protection Platform will be compared to endpoint detection and response and the main advantages of the last will be discovered .

– Endpoint detection and response optimum is a solution consisting of two main applications ( endpoint agent & kaspersky endpoint security “below version 11.6” or kaspersky hybrid cloud or kaspersky for windows server ) .

– In new versions of kaspersky endpoint security form version 11.7 and above , endpoint agent became part of the platform and user doesn’t have to install both applications seperately and intergrate between them .

– During this course we will use kaspersky security center “Web console” since we are using EDR and results will not be shown except in web console .

– We will also see how to install the solution via the two methods ( Change application components OR Edit the application settings directly ) .

– Then we will discover all the features of EDR optimum like discovering all the files , network connections , registery that threat can create on the machine .

– Responses also will be discussed like ( Host isolation ; to completely isolate the pc from the network .. Execution prevention ;to prevent the execution of the threat form begining .. IOC Scan ; To search for specific md5 hash on other pcs in the network ..

Who this course is for
Network Security Engineers
System Administrators
IT Administrators