VMware Carbon Black App Control Advanced Administrator

System administrators and security operations personnel, including analysts and managers

By the end of the course, you should be able to meet the following objectives:

• Manage and configure the Carbon Black App Control sever based on organizational requirements
• Implement rules to support business processes and automatic approvals
• Identify scenarios and use cases for Custom rules and Event rules
• Describe common troubleshooting scenarios for the Carbon Black App Control server
• Describe common troubleshooting scenarios for the Carbon Black App Control Windows agent

Not available. Please contact.

1  Course Introduction

• Introductions and course logistics
• Course objectives

2  Custom Rules Basics

• Execute / Write action rules
• Precedence
• Paths

3  Custom Rules Best Practices

• Rule Triad
• Rule multiplication

4  Rule Types

• Custom rule type overview

5  Optimizing Custom Rules

• Evaluating events

6  Event Rules

• Creating and editing
• Testing before implementing

7  Troubleshooting Considerations

• Server versus agent issues

8  Server Capabilities

• Tools, logs, common issues, scenarios

9  Agent Capabilities

• Tools, logs, common issues, scenarios