• Classroom
  • Online, Instructor-Led

In this class, you will learn how to use FortiEDR to protect your endpoints against advanced attacks with real-time orchestrated incident response functionality. You will also explore FortiEDR features and how they protect your endpoints automatically in real time.

Learning Objectives

  • Explain the FortiEDR approach and how it works
  • Identify the communicating components and how they are configured
  • Perform important administrative tasks, including: managing console users, updating collectors, deleting personal data for GDPR compliance, deploy multi-tenant environment and viewing system events
  • Carry out basic troubleshooting steps, including: verifying that FortiEDR is installed and actively blocking malware, identifying whether FortiEDR has blocked a process or connection, finding logs, and contacting FortiEDR Support
  • Perform important administrative tasks, including: managing console users, updating collectors, deleting personal data for GDPR compliance, and viewing system events
  • Recognize what Fortinet Cloud Service is and how it works
  • Complete basic tasks in of each area of the management console: the Dashboard, the Event Viewer, the Forensics tab, the Threat Hunting module, Communication Control, Security Policies, Playbooks, Inventory, and the Administration tab
  • Manage security events and their status
  • Block communication from applications that are risky or unwanted, but not inherently malicious
  • Find and remove malicious executables from all the devices in your environment
  • Understand how FortiEDR integrates with Fortinet Security Fabric, and how FortiXDR works
  • Use RESTful API to manage your FortiEDR environment
  • Prioritize, investigate, and analyze security events
  • Remediate malicious events and create exceptions to allow safe processes
  • Carry out basic troubleshooting tasks on all FortiEDR components
  • Obtain collector logs and memory dumps

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Competency Areas

Work Roles

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.