Skip to main content
Training Institute
  • Library
  • Schedule
  • Certifications
  • ATC
  • Academic Partner Program
  • Fast Track Workshops
  • More
Log in
Contents
Library Schedule Certifications ATC Academic Partner Program Fast Track Workshops

FortiNDR Cloud

Training / Library
Download Brochure

Blocks

Course Description

In this workshop, students will learn the fundamentals of using FortiNDR Cloud. Students will learn how to identify and investigate Incidents of Compromise using the tools available within FortiNDR Cloud.

In interactive labs, students will explore configuration and settings of FortiNDR Cloud.

Who Should Attend

Anyone who is responsible for the day-to-day management and monitoring of FortiNDR Cloud.

Prerequisites
  • Knowledge of network protocols
  • Knowledge of SoC concepts
  • Active FortiNDR Cloud credentials
Objectives

After completing this course, you should be able to:

  • Describe FortiNDR Cloud Architecture, including Front End, Back End, and Data Stores
  • Use the GUI and CLI for administration
  • Deploy Sensors
  • Understand and use Insight Query Language to refine and customize searches
  • Investigate threats and incidents
  • Investigate and create detections
  • Integrate FortiNDR Cloud with various Fortinet devices, including FortiSOAR, FortiSIEM, and FortiEDR
System Requirements

If you take an online format of this class, you must use a computer that has the following:

  • A high-speed Internet connection
  • An up-to-date web browser
  • A PDF viewer
  • Speakers or headphones
  • One of the following:
    • HTML5 support
    • An Up-to-date Java runtime environment (JRE) with Java plugin enabled in your web browser

You should use a wired Ethernet connection, not a Wi-Fi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.

Purchasing Process

More information on how to purchase instructor-led courses, on-demand labs, exam vouchers, and study material.
Product Versions
  • FortiNDR Cloud 24.x
Course Duration
  • Total course duration (estimated): 14 hours
    • 2 full days or 4 half days
Formats
  • Private instructor-led (classroom and online)
ISC2
  • CPE training hours: 15
  • CISSP domains: Security Operations
Part Number (SKU)

See Purchasing Process for more information

Certification

This course does not have a certification exam.

Data retention summary