TRM_DD

Ladda ner som PDF

Trend Micro Deep Discovery Training Advanced Threat Detection 2.0 for Certified Professionals

Trend Micro™ Deep Discovery Training for Certified Professionals is a
three-day, instructor-led training
course where participants will learn how to deploy and manage a Trend
Micro™ Deep Discovery threatprotection solution using:
• Trend Micro™ Deep Discovery Inspector
• Trend Micro™ Deep Discovery Analyzer
• Trend Micro™ Deep Discovery Email Inspector
Participants explore key concepts and methodologies of using a blend of Deep Discovery solutions for a more complete approach to network security. This course details the architecture, deployment options,threat management and system administration fundamentals, as well astroubleshooting and best practices, for all three products.
This course incorporates a variety of hands-on lab exercises allowing participants to put the lesson
content into action. This course is taught by Trend Micro-certified trainers. Upon completion of
this course, participants may choose to complete the certification examination to obtain designation as a Trend Micro Certified Professional for Deep Discovery.

Målgrupp

This course is designed for IT professionals who are responsible for
protecting networks from any kind of networked, endpoint, or cloud security threats.
The individuals who will typically benefit the most include:
- System administrators
- Network engineers
- Sales Engineers / Pre-Sales Engineers
- Technical Account Managers (TAMs)
- Support Engineers
- Integration Engineers
- Solution & Security Architects

Förkunskaper

Before you take this course, Trend Micro recommends that you have a
working knowledge of their
products and services, as well as basic networking concepts and principles.
You should also have a working knowledge of the following products:
• Windows servers and clients
• Firewalls, Web Application Firewalls, Packet Inspection devices
• General understanding of malware
Participants are required to bring a laptop computer with a screen
resolution of at least 1980 x 1080
or above; a display size of 15" or above is recommended.

Content
 
Introduction
• Evolving Threats
• Anatomy of a Targeted Attack
• Point of Entry - Spear Phishing
• How Long Can Targeted Attacks Stay Hidden?
• Why Monitor Your Network?
• Why Deep Discovery?
Deep Discovery Solution Overview
• What is Deep Discovery?
• Deep Discovery Attack Detection
• Deep Discovery Threat Detection Overview
• Deep Discovery Solution Map
    - Trend Micro Deep Discovery Inspector
        - Trend Micro Deep Discovery Analyzer
        - Trend Micro Deep Discovery Email Inspector
       - Control Manager
       - Custom Threat Defense
       - Deep Discovery Director
Deep Discovery Inspector Overview
• Architecture
• Key Features and Benefits
• Network Setup
• Form Factors
• Deep Discovery Inspector Models
• Deep Discovery Inspector Requirements
• Installation Design
• Positioning Deep Discover Inspector in the Network
• What’s new in Deep Discover Inspector 3.8 SP5?
Deep Discovery Inspector Installation and Configuration
• Information Provisioning for Setup
• Defining Architecture and Traffic to Capture
• Obtaining ISOs, Hot Fixes/Patches
• Performing an Installation
• Configuring Initial System Settings (Pre-Configuration Console)
•... Läs mer
Content
 
Introduction
• Evolving Threats
• Anatomy of a Targeted Attack
• Point of Entry - Spear Phishing
• How Long Can Targeted Attacks Stay Hidden?
• Why Monitor Your Network?
• Why Deep Discovery?
Deep Discovery Solution Overview
• What is Deep Discovery?
• Deep Discovery Attack Detection
• Deep Discovery Threat Detection Overview
• Deep Discovery Solution Map
    - Trend Micro Deep Discovery Inspector
        - Trend Micro Deep Discovery Analyzer
        - Trend Micro Deep Discovery Email Inspector
       - Control Manager
       - Custom Threat Defense
       - Deep Discovery Director
Deep Discovery Inspector Overview
• Architecture
• Key Features and Benefits
• Network Setup
• Form Factors
• Deep Discovery Inspector Models
• Deep Discovery Inspector Requirements
• Installation Design
• Positioning Deep Discover Inspector in the Network
• What’s new in Deep Discover Inspector 3.8 SP5?
Deep Discovery Inspector Installation and Configuration
• Information Provisioning for Setup
• Defining Architecture and Traffic to Capture
• Obtaining ISOs, Hot Fixes/Patches
• Performing an Installation
• Configuring Initial System Settings (Pre-Configuration Console)
• Finalizing Deep Discovery Inspector Configuration (Web Console)
• Testing the Deployment
• Viewing Installation Logs
• Enabling IP Rewriting
• Connecting Deep Discovery Inspector to Deep Discovery Director
Threat Detect Technologies
• Acronyms
3/8
• Detection Logic
• Engines versus Detections
• Network Content Inspection Engine (NCIE / VSAPI)
• Advanced Threat Scan Engine (ATSE / VSAPI)
• Network Content Correlation Engine (NCCE / CAV)
• Virtual Analyzer
• Community File Reputation (Census)
• Certified Safe Software Service (CSSS / GRID)
• Trend Micro URL Filtering Engine (TMUFE)
• Network Reputation with Smart Protection Network
• Mobile Application Reputation Service (MARS)
• Summary - Detection Events and Actions
Virtual Analyzer
• Virtual Analyzer Functionality
• What is Virtual Analyzer Looking For?
• Virtual Analyzer Components
• Communications Flow for Samples
• Overall Sample Ratings and Risk Level
• Virtual Analyzer Outputs
• File Processing Time
• Supported File Types
• How to Explain a Malicious Result
• Sending Files to Virtual Analyzer for Analysis
• Virtual Analyzer Feedback in Deep Discovery Inspector
• Importing a Custom Sandbox into Deep Discovery Inspector for use by
the Virtual
Analyzer
• Troubleshooting
Deep Discovery Inspector Administration
• Default Accounts
• Dashboard
• Analyzing Detected Threats
• Running Reports and Obtaining Threat Detection Metrics
• Report Examples
• System Management and Configuration
• Accessing Log Files
• Monitoring System Performance and Resources
Deep Discovery Analyzer Product Overview
• Key Features
• Network Setup
• Form Factors
• Required Services and Port Information
• Uniquely Identifying Samples
• Integration
• What’s New in Deep Discovery Analyzer 5.8?
Deep Discovery Analyzer Installation and Configuration
• Information Provisioning
• Defining the Architecture
• Obtaining ISOs, Hot Fixes/Patches
• Performing the Installation
• Configuring Initial System Settings
• Configuring Final Settings for Deep Discovery Analyzer
• Testing the Deployment
Deep Discovery Analyzer Administration
• Accessing the Web Console
• Console Overview
• Analyzing Events
• Submitting Samples to Deep Discovery Analyzer
• Deep Discovery Analyzer Reports
• Managing Suspicious Objects List
• Exceptions
• Deep Discovery Analyzer Sandbox Management
• Reports
• Alerts
• System Management and Configuration
Deep Discovery Email Inspector
• Key Functionality
• Supported Hardware
• Deployment Modes
• Ports Used
• Summary of Operation Modes
• Threat Detection in Deep Discovery Email Inspector
• Engine Architecture Overview
• What’s New in Deep Discovery Email Inspector 2.6?
Deep Discovery Email Inspector Installation and Configuration
• Information Provisioning
• Defining the Architecture
• Obtain ISOs, Hot Fixes/Patches
• Performing the Installation
• Configuring Initial System Settings using the Pre-Configuration Tool
• Configuring Final Deep Discovery Email Inspector Settings
• Testing the Deployment
• Connecting Deep Discovery Email Inspector to Deep Discovery Director
Deep Discovery Email Inspector Administration
• Management Console Overview
• Analyzing Threat Detections
• Configuring Policies
• Setting up Recipient Notifications
• Defining Email Message Tags
• Configuring Redirects (Non-Scannable Attachments)
• Adding Policy Exceptions
• Configuring Alerts
• Generating Reports
• Accessing Log Files
• System Administration
• Performing System Maintenance Tasks
Threat Connect
• Content
• Using Threat Connect
• Report Content
Connected Threat Defense
• Integration is Key to Effective Security
• Connected Threat Defense Requirements
• Connected Threat Defense Components
• Integrating Deep Discovery Inspector with Control Manager
• Suspicious Objects Handling with Control Manager
Integration
• Open Architecture
• Deep Discovery Inspector Integration
• Integration with Syslog Servers and SIEM Systems
• Third-Party Blocking Integration
      - Check Point Open Platform for Security
      - HP TippingPoint Security Management System
      - IBM Security Network Protection
      - Palo Alto Firewalls
• Blue Coat ProxySG
• Deep Discovery Analyzer Integration
Appendix 1: Monitoring VM Traffic with Deep Discovery Inspector
• Overview
• vDS Remote Monitoring Feature
• Implementation
• Configuration

Utbildningen levereras i samarbete med

Kursfakta

Kurs-ID: TRM_DD
Längd: 3 dagar
Pris exkl moms: 21 500 kr
Inregistrering: 09.00
Kursstart: 09.30
Kursslut (ca): 17.00

Frågor om kursen?

Har du frågor om kursens innehåll, leveransdatum/ort eller behöver en företagsanpassad variant? Fyll i formuläret nedan!


Kan betalas med:
TRAINING CARD

Avtalsrabatter och kampanjer kan ej nyttjas på denna kurs.


Ort och datum

Stockholm
27 aug-29 aug
Boka nu!
29 okt-31 okt
Boka nu!
Cloud Access
i Läs mer

Delta på kursen från ditt hem, jobb eller annan plats.

27 aug-29 aug
Boka nu!
29 okt-31 okt
Boka nu!

Tipsa