Detection and Response with XDR

Overview

Modern security operations face a rapidly evolving threat landscape, making it difficult to gain complete visibility across disparate security tools. Detection and Response with XDR: Integrated Security Solutions to Combat Emerging Threats introduces learners to how XDR can bridge that gap by centralizing telemetry, intelligence, and response capabilities from a variety of sources into a single platform. In this comprehensive course, you will discover why XDR is a game-changer in reducing detection and response times, explore how XDR optimizes security operations, and learn practical strategies to implement XDR in your organization. This course provides the necessary skills to design, implement, and automate threat responses using cutting-edge XDR technology.

Syllabus

Security Operations and Tooling

In this module, you will gain a basic understanding of how security operation centers and incident response teams function. Whether you are new to the field or an experienced professional, this information is essential and worth your attention. You will explore the Modern Security Operations Center, security operations concepts and tooling, and computer security incident response teams (often called IR teams).

Extended Detection and Response (XDR)

In this module, you will dive into the latest trends and challenges in the security landscape, discover the concept of XDR, and explore how its integrated security stack enhances threat detection and response. Get ready to see how XDR can revolutionize your security operations.

XDR with Cisco

In this module, you will cover crucial aspects of threat management, including how to hunt for threats, investigate incidents, and effectively respond to security breaches using Cisco XDR capabilities. Get ready to enhance your skills in both proactive and reactive security measures.

Security Automation

In this module, you will explore concepts related to automation within security operations, understand how automation fits into an XDR product, and see how Cisco XDR enables you to accelerate investigation and response. You will focus on industry best practices, as automation is a core component of any modern security operation center and a necessity given the increasing number and speed of threats. You will also see how these concepts are applied specifically within Cisco XDR.