Skip to main content
Training Institute
  • Library
  • Schedule
  • Certifications
  • ATC
  • Academic Partner Program
  • Fast Track Workshops
  • More
Log in
Contents
Library Schedule Certifications ATC Academic Partner Program Fast Track Workshops

FortiNDR Cloud Analyst

Training / Library
Download Brochure

Blocks

Course Description

In this course, you will learn the fundamentals of using FortiNDR Cloud. You will learn how to identify and investigate detections and indicators of compromise using the tools available on FortiNDR Cloud.

Who Should Attend

Security professionals involved in the day-to-day management and monitoring of FortiNDR Cloud should attend this course.

Prerequisites

You must have knowledge of networking, cybersecurity, and SOC concepts.

Agenda
  1. Introduction
  2. Sensors
  3. Events
  4. Internal Query Language
  5. Detections
  6. Creating Decetors
  7. Investigations
  8. Integrations
  9. Threat Hunting Supplement
Objectives

After completing this course, you should be able to:

  • Describe FortiNDR Cloud architecture
  • Navigate the FortiNDR Cloud portal
  • Identify the sensor types
  • Describe metadata production
  • Describe event types and fields
  • Describe core IQL concepts
  • Describe detections
  • Explain behavioral observations
  • Describe how to write a query
  • Describe how to tune a detector
  • Describe investigations
  • Identify supported integrations
  • Describe the essentials solution pack
  • Explain the Fortinet Automation Service benefits
  • Explain threat hunting concepts
System Requirements

If you take the online format of this class, you must use a computer that has the following:

  • A high-speed Internet connection
  • An up-to-date web browser
  • A PDF viewer
  • Speakers or headphones
  • One of the following:
    • HTML 5 support
    • An up-to-date Java Runtime Environment (JRE) with Java Plugin enabled on your web browser

You should use a wired Ethernet connection, not a WiFi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.

Enroll Now

Access the latest self-paced training version
Purchasing Process

More information on how to purchase instructor-led courses, on-demand labs, exam vouchers, and study material.
Find an Instructor-Led Class

Browse our schedule for upcoming classes delivered by Fortinet
Product Versions
  • FortiNDR Cloud 26
Course Duration
  • Lecture time (estimated): 7 hours
  • Lab time (estimated): 5 hours
  • Total course duration (estimated): 12 hours
    • 2 full days or 3 half days
Formats
  • Instructor-led (classroom and online)
  • Self-paced online
ISC2
  • CPE training hours: 7
  • CPE lab hours: 5
  • CISSP domains: Security Operations
Part Number (SKU)

See Purchasing Process for more information

Exam

More information about the exam.
Certification

Data retention summary