T401 | AURORA EDR with ASGARD Management Center
One day web-based training with virtual lab infrastructure focused on AURORA EDR Agent. Topics: Enroll and manage Aurora EDR agent on endpoints using ASGARD Management Center. Manual enrolment on endpoints. Strategies for initial ruleset configuration and updating of rulesets. Write your own specific Sigma Rule with and without kill action. Event logs in the Analysis Cockpit.
Technical requirements
To use the training “AURORA EDR with ASGARD Management Center”, we provide one Windows Systems, one ASGARD Management Center and one ASGARD Analysis Cockpit in our Cloud LAB. To be able to perform the training and exercises, a client with RDP software is required together with an internet connection.
Prerequisites
Estimated training time is 8 hours. Cloud Lab is available for five days.
Training must be completed within the five-day lab availability.
Training concludes with a participation certificate.
T401 | AURORA EDR with ASGARD Management Center
900,00 €
Detailed learning content
- Facts about AURORA
- AURORA with ASGARD
- Install ASGARD Service Controller
- Sigma Management
- AURORA Management
- Deploy AURORA
- AURORA Use Cases
- Process Excludes for Aurora
- Environment Specific Tuning
- AURORA IOC Management
- AURORA without ASGARD (optional)
- Upgrade and Update
- Installation without ASGARD
- AURORA Dashboard
- Command Line Options
- AURORA Agent Util Pro