CrowdStrike: Zero to Falcon Admin

Course details

This course is designed to provide learners with an in-depth understanding of CrowdStrike/EDR, a powerful endpoint security tool. Participants will learn how to install and configure CrowdStrike/EDR, manage hosts, create and manage prevention policies, customize IOAs, manage exclusions and quarantines, and troubleshoot issues. Additionally, this course includes an exam preparation module that will equip learners with the knowledge and skills needed to pass the certification exam.

Module 1: What is CrowdStrike/EDR

• Introduction to CrowdStrike/EDR

• Understanding Endpoint Detection and Response (EDR)

• Key features and benefits of CrowdStrike/EDR

Module 2: Users and Roles

• User and role management in CrowdStrike/EDR

• Understanding permissions and access levels

• Best practices for user and role management

Module 3: Installation

• CrowdStrike/EDR installation prerequisites

• Installing CrowdStrike/EDR on endpoints

• Post-installation configurations and best practices

Module 4: Troubleshooting

• Troubleshooting common issues with CrowdStrike/EDR

• Best practices for effective troubleshooting

Module 5: Uninstalling & Sensor updates

• Uninstalling CrowdStrike/EDR from endpoints

• Updating CrowdStrike/EDR sensors

• Best practices for sensor management

Module 6: Host management

• Managing hosts using CrowdStrike/EDR

• Understanding host groups and policies

• Best practices for host management

Module 7: Prevention policies

• Creating and managing prevention policies in CrowdStrike/EDR

• Understanding policy rules and configurations

• Best practices for policy management

Module 8: Custom IOAs

• Creating custom Indicators of Attack (IOAs) in CrowdStrike/EDR

• Understanding IOA rules and configurations

• Best practices for custom IOA management

Module 9: Exclusions and Quarantines

• Managing exclusions and quarantines in CrowdStrike/EDR

• Understanding exclusion and quarantine rules and configurations

• Best practices for exclusion and quarantine management

Module 10: Exam Preparation

• Preparing for the CrowdStrike/EDR certification exam

Target audience: IT professionals, cybersecurity professionals, system administrators, and anyone interested in learning how to manage and secure endpoints using CrowdStrike/EDR.