FortiEDR Administrator - FG12

This course will help:

Gain proficiency in using FortiEDR to protect endpoints against sophisticated attacks by leveraging real-time incident response orchestration capabilities
Learn about the real-time automated endpoint protection mechanisms implemented in FortiEDR

Pre-requisites:

This course assumes that participants have a basic understanding of cybersecurity concepts.

Course syllabus:

Product Overview and Installation
Administration
Security Policies
Fortinet Cloud Security and Playbooks
Communication Control
Events and Incidents
Threat Hunting
RESTful API
Troubleshooting

You will learn:

Explain the FortiEDR approach and how it works
Identify the communicating components and how they are configured
Perform important administrative tasks, including managing console users, updating collectors, deleting personal data for GDPR compliance, deploying multi-tenant environments, and viewing system events
Define at Fortinet Cloud Service is and how it works
Complete basic tasks in each area of the management console: the Dashboard, Incidents, Threat Hunting, Communication Control, Inventory, and Administration tabs, and the Security Policies and Playbooks pages
Manage security events and their status
Block communication from applications that are risky or unwanted, but not inherently malicious
Find and remove malicious executables from all the devices in your environment
Explain how FortiEDR integrates with Fortinet Security Fabric, and how FortiXDR works
Use RESTful API to manage your FortiEDR environment
Prioritize, investigate, and analyze security events
Remediate malicious events and create exceptions to allow safe processes
Perform various basic troubleshooting tasks on all FortiEDR components
Obtain collector logs and memory dumps