Disclaimer: This course offered independently by Blue Team Consulting, LLC and is not affiliated with CrowdStrike, Inc.
InstructorHailie Shaw
Coupon
Coupon
Instruction pairs theoretical lectures with practical demonstrations of console navigation, detection triage, and real-time response capabilities.
The curriculum covers essential operational tasks including endpoint log searching via CQL, sandbox detonation, and managing exclusions.
One signal from before the displayed update suggests that search and correlation modules may be outdated due to the platform's transition from Splunk to Logscale; however, the recent update label does not prove this has been corrected.
The curriculum relies on demonstrations rather than providing dedicated lab environments or hands-on projects.
The content aligns well with the stated goals of SOC analysts and incident responders seeking a baseline introduction.