COURSE DELIVERY SCHEDULE

MODULES
DAY 1
Module 1 - Introduction to Cisco AMP Technologies
Lesson 1: Examining Talos
Lesson 2: Examining the AMP Security Model
Lesson 3: Examining the Protection Framework, Part 1 - Detection Engines
Lesson 4: Examining the Protection Framework, Part 2 - Advanced Analytics
Lesson 5: Examining the Retrospection Framework
Module 2 - AMP for Endpoints Overview and Architecture
Lesson 1: Examining AMP for Endpoints, Part 1 - Features and Architecture
Lesson 2: Examining AMP for Endpoints, Part 2 - Platforms and Communications
Lesson 3: Examining the AMP Cloud Architecture
Lesson 4: Examining the AMP Private Cloud
Lesson 5: Examining AMP for Endpoints Management Components
Module 3 - Console Interface and Navigation
Lesson 1: Setting Up for First Use
Lesson 2: Exploring the Dashboard
Lesson 3: Examining the Menu System
Lab 1: Accessing AMP for Endpoints
Module 4 - Using AMP for Endpoints
Lesson 1: Exploring Your Environment with the AMP Console
Lesson 2: Operating the System
Lab 2: Attack Scenario
Module 5 - Detecting an Attacker— A Scenario
Lesson 1: Identifying an Active Attacker, Part 1 - Analysis Scenario
Lesson 2: Identifying an Active Attacker, Part 2 - Trajectory Path
Lesson 3: Performing Further Analysis
Lab 3: Attack Analysis
DAY 2
Module 6 - Modern Malware
Lesson 1: Examining Modern Malware
Lesson 2: Examining Exploit Kits
Module 7 - Analysis
Lesson 1: Analyzing Events
Lesson 2: Examining the File Analysis and Repository Features
Lesson 3: Examining File and Device Trajectories
Lesson 4: Examining Further Analysis Features
Lesson 5: Reporting
Lab 4: Analysis Tools and Reporting
Module 8 - Analysis Case Studies
Lesson 1: Malware Detection Case Study
Lesson 2: ZeroAccess Detection Example
Lab 5: Zbot Analysis
Module 9 - Outbreak Control
Lesson 1: Managing Malware Detections
Lesson 2: Managing Indications of Compromise
Lab 6: Outbreak Control
Module 10 - Endpoint Policies
Lesson 1: Defining Endpoint Policies, Part 1 - Policy Basics
Lesson 2: Defining Endpoint Policies, Part 2 - Advanced Settings
Lab 7: Endpoint Policies
DAY 3
Module 11 - Groups and Deployment
Lesson 1: Examining Groups
Lesson 2: Configuring Exclusions
Lesson 3: Preparing for a Deployment
Lesson 4: Deploying Windows Connectors
Lesson 5: Windows Installation and the Connector Interface
Lesson 6: Troubleshooting
Lab 8: Groups and Deployment
Lab 9: Testing Your Policy Configuration
Module 12 - AMP REST API
Lesson 1: Examining the AMP REST API
Lesson 2: REST API Documentation and Resources
Lesson 3: Query Response Data Structure: JSON
Lesson 4: REST API Authentication
Lesson 5: Performing REST API Transactions
Lesson 6: Using REST API Data in Other Applications
Lab 10: REST API
Module 13 - Accounts
Lesson 1: User Administration
Lesson 2: Further Account Options
Lab 11: User Accounts