Course Schedule
| Date | Time | Price | Options |
|---|---|---|---|
| 04/27/2026 | 09:00 AM - 05:00 PM CT | 3,395.00 |
Overview
Cisco XDR Security Operations (XDROPS) is a 3-day training guiding you through the main aspects and challenges of traditional SOC. You will learn the Cisco XDR security platform and how it can simplify security operations in today’s hybrid, multi-vendor, multi-threat landscape. Overview of all the main integration possibilities and components, including APIs discovery, Endpoint and Network Telemetry and ITSM, SIEM systems, and Public Cloud. Through expert instruction and hands-on lab exercises, you will learn how to read the components and work with Incident Manager for effective threat prioritization, streamlined investigations, and evidence-backed recommendations. In this training, you will discover how to elevate productivity with automation capabilities and boost your security resources for optimal value.
Prerequisites:
The knowledge and skills that the learner should have before attending this course are as follows:
- Working knowledge of the Windows and Linux operating systems.
- Familiarity with basics of networking security concepts.
- Technical understanding of TCP/IP networking and network architecture.
- Technical understanding of security concepts and protocols.
The recommended Cisco offering may help you meet these prerequisites:
- Implementing and Administering Cisco Solutions (CCNA)
Course Objectives:
Upon completing this course, the learner will be able to meet these overall objectives:
- Understand the architecture of Cisco Secure Client/XDR.
- Understand the Identification, Containment, Eradication, and Recovery Workflows.
- Understand the XDR Remote Connector and how to accomplish arbitrary integrations.
- Learn how to create automation using Automation APIs.
- Recognize the types and sequence of Orchestration Workflows.
- Understand the fundamentals of working with Public Cloud through XDR Orchestration.
- Explain how to initiate Cisco XDR investigations from Splunk.
Who Should Attend
The primary audience for this course is as follows:
- Cisco integrators, resellers, and partners
- Network administrators
- Security administrators
- Security consultants
- Systems engineers
- Cybersecurity engineers
- Cybersecurity investigators
- SOC analysts
- Network design engineers
- Solution architects
FAQ
Ten (10) business days’ notice is required to reschedule a class with no additional fees. Notify TOPTALENT LEARNING as soon as possible at 469-721-6100 or by written notification to info@toptalentlearning.com to avoid rescheduling penalties.
Please contact our team at 469-721-6100; we will gladly guide you through the online purchasing process.
You will receive a receipt and an enrollment confirmation sent to the email you submitted at purchase. Your enrollment email will have instructions on how to access the class. Any additional questions our team is here to support you. Please call us at 469-721-6100.
If a student is 15 minutes late, they risk losing their seat to a standby student. If a student is 30 minutes late or more, they will need to reschedule. A no-show fee will apply. Retakes are enrolled on a stand-by basis. The student must supply previously issued courseware. Additional fees may apply.
You will receive a ‘Certificate of Completion’ once you complete the class. If you purchased an exam voucher for the class, a team member from TOPTALENT LEARNING will reach out to discuss your readiness for the voucher and make arrangements to send it.