USM Anywhere™: Endpoint Detection & Response (EDR)
Section outline
-
Welcome to the Endpoint Detection & Response course.
This course introduces you to the AlienVault Agent. The AlienVault Agent extends the Endpoint Threat Detection and Response (EDR) capabilities of AlienVault® USM Anywhere™. It includes host-based threat detection, file integrity monitoring, Windows log collection and response actions, all without a sensor. Each agent will talk directly to AlienVault® USM Anywhere™. This makes the agent particularly useful for monitoring remote assets.
After completing this course, students will be able to install and configure the AlienVault Agent and understand how it extends the Endpoint Threat Detection and Response (EDR) capabilities of USM Anywhere.
This course should take approximately 15 minutes to complete.
Notice: These training documents are protected by the United States copyright laws and are proprietary to LevelBlue Intellectual Property. Sale, disclosure, copying, recording, reproduction, merger, translation, modification, enhancement, or use by anyone other than authorized individuals without the prior written consent of LevelBlue Intellectual Property is strictly prohibited.
©2024 LevelBlue Intellectual Property. LevelBlue logo, and registered trademarks and service marks of LevelBlue Intellectual Property and/or LevelBlue affiliated companies. All other marks are the property of their respective owners.
-
Please consult our FAQ on Course Navigation for help consuming this material.
Course Completion: Upon completion of a module please click the Mark as done button
Getting Support: Please view our Frequently Asked Questions.
-
-
This video demonstrates how to configure to install and configure the AlienVault Agent and explain how it extends the Endpoint Threat Detection and Response (EDR) capabilities of USM Anywhere.
-
-
If you would like a provide feedback on the material or the platform, please complete our Survey.
If you would like a certificate for your records, please select the Download Certificate icon. The option will not become available until you have completed all modules of the training course.