Kaspersky NEXT XDR Expert (048.1.1)

Course Overview

Kaspersky NEXT XDR Expert is a reliable cybersecurity solution that helps protect corporate IT infrastructures against advanced threats. Kaspersky NEXT XDR Expert enables you to:

• Collect data from multiple sources and store it in a convenient form for analysis. Collector services can receive data from numerous sources and convert it into a unified format. The data is stored in a high-performance ClickHouse analytical database. The product comes with a set of ready-to-use normalizers.
• Manually and automatically analyze collected data and detect threats. Correlators have flexible capabilities to implement even the most complex detection logic. The product includes a variety of correlation rules.
• Comprehensively assess the level of corporate security using data from reports and the dashboard.
• Analyze cyberthreat development stages using the investigation graph.
• Analyze threat actions using collected telemetry and KEDR Expert detection mechanisms.
• Manage and reliably protect endpoint devices using Kaspersky Endpoint Security.
• Automatically and manually respond to threats, which, combined with the product’s integration capabilities, allows you to implement complex cross-product protection scenarios.
• Effectively manage collected data. The web interface provides the user with convenient methods of interaction, including contextual search and response actions, data visualization, and an investigation graph.

The theoretical part of the course and hands-on labs provide participants with the knowledge and skills needed to plan and deploy the solution, understand how it works, and configure and maintain it.