This video is still being processed. Please check back later and refresh the page.

Uh oh! Something went wrong, please try again.

XDR - Extended Detection and Response

Learn about Cato XDR, an eXtended Detection and Response solution that combines multiple security tools to detect and respond to complex security threats in real-time and retrospectively.

rate limit

Code not recognized.

About this course

Upon completing this course, students will be able to understand the concepts and functionality of Cato XDR and its role in security operations.

  • Understanding XDR and its Significance: To comprehend the concept of eXtended Detection and Response (XDR), its significance in modern security operations, and the role it plays in providing a second line of defense for attacks not blocked in real-time.
  • Exploring Cato XDR Benefits and Differentiation: To explore the benefits of Cato XDR in streamlining security operations, reducing alert fatigue, and improving security posture by detecting sophisticated threats that real-time engines cannot identify.
  • Learning the Threat Hunting Cycle: To understand the threat hunting procedures introduced by XDR, including detection, investigation, and remediation stages, and how these contribute to proactive response and threat mitigation.
  • Understanding Cato XDR Architecture: To gain insight into the architecture of Cato XDR, including the data lake, building blocks, and the functionality of the platform, stories engine, and different XDR tiers.
  • Exploring XDR Engines and Stories: To delve into the functioning of XDR engines, including threat prevention, threat hunting, and UEBA correlation engines, and to understand the concept of XDR stories and their types.

Curriculum

  • Introduction to Cato eXtended detection and response
  • XDR Building Blocks
  • XDR - Platform Overview
  • XDR - Stories Workbench
  • XDR - Microsoft Defender EDR stories
  • XDR - EPP stories
  • XDR Similar Stories
  • XDR Indications Catalog
  • XDR Demo Investigation

About this course

Upon completing this course, students will be able to understand the concepts and functionality of Cato XDR and its role in security operations.

  • Understanding XDR and its Significance: To comprehend the concept of eXtended Detection and Response (XDR), its significance in modern security operations, and the role it plays in providing a second line of defense for attacks not blocked in real-time.
  • Exploring Cato XDR Benefits and Differentiation: To explore the benefits of Cato XDR in streamlining security operations, reducing alert fatigue, and improving security posture by detecting sophisticated threats that real-time engines cannot identify.
  • Learning the Threat Hunting Cycle: To understand the threat hunting procedures introduced by XDR, including detection, investigation, and remediation stages, and how these contribute to proactive response and threat mitigation.
  • Understanding Cato XDR Architecture: To gain insight into the architecture of Cato XDR, including the data lake, building blocks, and the functionality of the platform, stories engine, and different XDR tiers.
  • Exploring XDR Engines and Stories: To delve into the functioning of XDR engines, including threat prevention, threat hunting, and UEBA correlation engines, and to understand the concept of XDR stories and their types.

Curriculum

  • Introduction to Cato eXtended detection and response
  • XDR Building Blocks
  • XDR - Platform Overview
  • XDR - Stories Workbench
  • XDR - Microsoft Defender EDR stories
  • XDR - EPP stories
  • XDR Similar Stories
  • XDR Indications Catalog
  • XDR Demo Investigation