Omschrijving
This one-day course teaches you how to use the VMware Carbon Black® App Control™ product and leverage the capabilities to configure and maintain the system according to their organization’s security posture and organizational policies. This course provides an in-depth, technical understanding of the Carbon Black App Control product through comprehensive coursework and hands-on scenario-based labs.
Objectives
By the end of the course, you should be able to meet the following objectives:
- Describe the components and capabilities of application control
- Manage and configure the Carbon Black App Control server based on organizational requirements
- Create policies to control enforcement levels and agent functionality
- Implement rules to support the organization’s security posture
- Use the Carbon Black App Control tools to understand agent and server data
Intended Audience
System administrators, security operations personnel including analyst and managers.
Prerequisites
There are no prerequisites for this course.
Product Alignment
- VMware Carbon Black App Control
Course Outline
1 Course Introduction
- Introductions and course logistics
- Course objectives
2 Login Accounts and Groups
- User accounts
- User roles
3 Policies
- Modes and Enforcement Levels
- Rule sets
4 Notifiers
- Agent side display notification use
5 Computer Details
- View agent information
- Related views
6 Local Approval Timed Policy Override
- Use case and functionality
7 Software Approvals
- Methods and use cases
8 Custom Rules
- Rule type and use cases
9 Tools
- Meters and Alerts
10 Events
- Agent and server events
11 Baseline Drift
- Changes in a baseline
