Cortex XDR: Security Operations and Integration

“This course primarily focused on low level workflow of cortex XDR, its capabilities, advantages and improvements that can be done to the application, how the EPM and MPM works together with understanding to keep the system secure. It gave me an insight into how to go about an incident as an incident responder. Not only as an IR but also as an admin to dvelve into the deployment and management of the XDR console. I would say this has been very fruitful. I am satisifed with the course' concepts.

“Great content with helpful resources to deploy and operationally get going with the Cortex XDR solution.

“I've learned how to create and deploy the agent to endpoints, create Policies and Profiles, went through the available options in the profiles and tested them in the lab. I've got a basic analysis overview of alerts, causality chain and how to respond to alerts. Also to create exceptions or block certain files and threats. I didn't just use the Cortex XDR Management Console, I've learned how to do the same task via different ways, like the Cortex XDR Agent or cytool.exe for command line interaction with the Cortex XDR Agent local files, caches and modules.

“All around great for begginers that havent had the chance to use the managemnt console. It is also a great refresher for students that haven gotten away from cortex and are coming back. Awesome course, i am looking forwards to EDU-262

“This course and lab environment is a solid introduction to the Cortex XDR EDR. Speaking as someone who already utilizes Cortex XDR for SOC monitoring, I was able to dive into some unfamiliar functions that help reinforce my investigative capabilities. The lab exercises provide a risk-free method of learning with great feedback on how Cortex XDR responds to attacks; the labs were high quality and I experienced little to no issues, with a caveat that I have a solid technical background. I highly recommend this course for anyone wanting to learn more about Cortex XDR, as you cannot be the instructor-led format coupled with quality interactive lab elements.

“Very good course where I got a lot more hands on experience with parts of Cortex that I don't get to be involved with on a daily basis but need to know (setting up Broker VM, dependent services, etc.). If I had one thing to complain about it would be that we did not touch on any OS's other than Windows. NDIT has Windows, Linux, Android, and MAC endpoints that we troubleshoot. It would have been very useful to go through some deployment and troubleshooting on those OS's, even if it was extremely briefly just to have an understanding of the process.