EDR Advanced Administrator

Session Detail:    Classroom 1 Day

This one-day course teaches you how to use the advanced features of the VMware Carbon Black® EDR™ product. This usage includes gaining access to the Linux server for management and troubleshooting in addition to configuring integrations and using the API. This course provides an in-depth, technical understanding of the Carbon Black EDR product through comprehensive coursework and hands-on scenario-based labs. This class focuses exclusively on advanced technical topics related to the technical back-end configuration and maintenance.


This course requires completion of the following course

  • VMware Carbon Black EDR Administrator

Who Can Benefit

System administrators and security operations personnel, including analysts and managers.

Session Outline

Class Outline

Module 1: Course Introduction

  • Lesson 1: Introductions and course logistics
  • Lesson 2: Course objectives

Module 2: Architecture

  • Lesson 1: Data flows and channels
  • Lesson 2: Sizing considerations
  • Lesson 3: Communication channels and ports

Module 3: Server Datastores

  • Lesson 1: SOLR database
  • Lesson 2: Storage configurations and data aging
  • Lesson 3: Partition states
  • Lesson 4: Postgres
  • Lesson 5: Modulestore

Module 4: EDR API

  • Lesson 1: CBAPI overview
  • Lesson 2: Viewing API calls in the browser
  • Lesson 3: Utilizing the API to access data

Module 5: Threat Intelligence Feeds

  • Lesson 1: Feed structure
  • Lesson 2: Report indicator types
  • Lesson 3: Custom threat feed creation and addition

Module 6:Syslog Integration

  • Lesson 1: SIEM support
  • Lesson 2: Configuration

Module 7: Troubleshooting

  • Lesson 1: Server-side scripts
  • Lesson 2: Server logs
  • Lesson 3: Sensor operations

Need to train your team?

All of our sessions can be customized to meet your team’s specific need. Build the perfect program by picking and choosing topics from any of the courses in our catalog. A personalized private session gives you the ultimate flexibility and helps maximize your team’s valuable time!

Requesting Team Training
DateTimeTypePriceAdd To Cart

EDR Advanced Administrator

1 Day


Chat with a Coach

Chat with a Coach

Have a more immediate need? Why spend the next hour searching online for answers when you can spend just 15 minutes with one of our experts and get accurate and personalized answers to all of your questions. 

$9.99 | 15 Minutes

Book Now