Live Cisco XDROPS Training Course

Guaranteed to Run

Upcoming Dates	Class Times	Class Format	Quote
6/9 - 6/11, 2025	10:00 AM - 6:00 PM ET 9:00 AM - 5:00 PM CT 7:00 AM - 3:00 PM PT 4:00 AM - 12:00 PM HT	Instructor-Led	Instant Quote
8/11 - 8/13, 2025	10:00 AM - 6:00 PM ET 9:00 AM - 5:00 PM CT 7:00 AM - 3:00 PM PT 4:00 AM - 12:00 PM HT	Instructor-Led	Instant Quote
10/6 - 10/8, 2025	10:00 AM - 6:00 PM ET 9:00 AM - 5:00 PM CT 7:00 AM - 3:00 PM PT 4:00 AM - 12:00 PM HT	Instructor-Led	Instant Quote

Instructor-Led

• Certified Instructor
• Includes all course materials

Can't travel or you want to stay with your family or business. No problem!

Stay in your own city and save the additional expenses of roundtrip airfare, lodging, transportation, and meals and receive the same great instruction live from our instructors in our Live Instructor-Led Remote Classroom Training.

Remote Classroom Training

Our Remote Classroom Training is a live class with students observing the instructor and listening through your computer speakers.

You will see the instructor's computer, slides, notes, etc., just like in the classroom. You will be following along, doing work, labs, and individual assignments.

CED Solutions Rewards Points Program

"CED Solutions is an excellent resource for IT training. The class was outstanding. It completely exceeded my expectations."

-Brian Morris, Junction City, KS

Cisco XDR Security Operations (XDROPS) will guide you through the main aspects and challenges of traditional SOC. You will learn the Cisco XDR security platform and how it can simplify security operations in today's hybrid, multi-vendor, multi-threat landscape.

Through expert instruction and hands-on lab exercises, you will learn how to read the components and work with Incident Manager for effective threat prioritization, streamlined investigations, and evidence-backed recommendations. In this training, you will discover how to elevate productivity with automation capabilities and boost your security resources for optimal value.

Prerequisites:

The knowledge and skills that the learner should have before attending this course are as follows:

• Working knowledge of the Windows and Linux operating systems.
• Familiarity with basics of networking security concepts.
• Technical understanding of TCP/IP networking and network architecture.
• Technical understanding of security concepts and protocols.

The recommended Cisco offering may help you meet these prerequisites:

• Implementing and Administering Cisco Solutions (CCNA)

Course Objectives:

Upon completing this course, the learner will be able to meet these overall objectives:

• Understand the architecture of Cisco Secure Client/XDR.
• Understand the Identification, Containment, Eradication, and Recovery Workflows.
• Understand the XDR Remote Connector and how to accomplish arbitrary integrations.
• Learn how to create automation using Automation APIs.
• Recognize the types and sequence of Orchestration Workflows.
• Understand the fundamentals of working with Public Cloud through XDR Orchestration.
• Explain how to initiate Cisco XDR investigations from Splunk.

Who Should Attend

The primary audience for this course is as follows:

• Cisco integrators, resellers, and partners
• Network administrators
• Security administrators
• Security consultants
• Systems engineers
• Cybersecurity engineers
• Cybersecurity investigators
• SOC analysts
• Network design engineers
• Solution architects

Course content

Module 1: Evolution and Introduction to Cisco XDR

• Lesson 1: Detection and Response and the challenges of traditional SOC
• Lesson 2: What is the OODA loop?
• Lesson 3: Overview of Cisco XDR

Module 2: Threat Detection and Incident Response Workflow

• Lesson 1: Understanding Threat Detections with Diverse Intelligence
• Lesson 2: How to read components: Judgement / Indicators / Feeds / Events
• Lesson 3: Cisco XDR: Incident Manager

Module 3: Enrichment from Third-Party Integrations

• Lesson 1: Overview of the third-party security landscape
• Lesson 2: Built-in Integrations
• Lesson 3: What is a Relay Module?
• Lesson 4: XDR: Remote Connector
• Lesson 5: Accomplishing arbitrary integrations

Module 4: XDR APIs

• Lesson 1: Northbound and Southbound APIs
• Lesson 2: Threat Intelligence APIs: Private and public databases of threat intel
• Lesson 3: Investigation APIs: Enrich data using your integrated products
• Lesson 4: Response APIs
• Lesson 5: OAuth APIs: Use credentials and get access tokens
• Lesson 6: Automation APIs: Trigger workflows in XDR to do just about anything you want!

Module 5: XDR Automation and Orchestration

• Lesson 1: Understanding Orchestration Workflows: Types and sequence
• Lesson 2: Workflows Components: Targets, Account Keys, Triggers, Variables, Events, Schedules & Reports
• Lesson 3: Constructing a basic workflow
• Lesson 4: Exploring built in cisco and third-party service activities and logics
• Lesson 5: Customizing out of the box workflows to fit the business use case
• Lesson 6: Nesting workflows
• Lesson 7: Using Microsoft APIs to investigate/detect suspicious email with Cisco Secure Email
• Lesson 8: Enforcing DLP policy on outgoing email using Cisco XDR automation

Module 6: Endpoint and Network Telemetry

• Lesson 1: Network and Endpoint Visibility Together: Telemetry + Device Insights
• Lesson 2: Network Visibility Module
• Lesson 3: Cisco Secure Client/XDR: Architecture
• Lesson 4: Reports and Audit logs
• Lesson 5: Asset Tag Device Management

Module 7: Cisco XDR with ITSM, SIEM systems and Public Cloud

• Lesson 1: Overview translation of Splunk CIM to XDR CTIM
• Lesson 2: Initiating Cisco XDR investigation from Splunk
• Lesson 3: Splunk and Cisco XDR Webhooks or Atomic Actions
• Lesson 4: Overview of Cisco XDR and Service Now Integration
• Lesson 5: Adding Context to ServiceNow incident - Using XDR Automate
• Lesson 6: Fundamentals of working with Public Cloud with XDR Orchestration

Lab Outline:

Labs are designed to assure learners a whole practical experience, through the following practical activities:

• Accessing Cisco XDR
• Overview of Cisco XDR
• Validate an Attack and Determine the Incident Response
• Perform Threat Hunting
• Discover Third Party integrations
• Query and Recognize XDR API
• Explore Cisco XDR Orchestration
• Evaluate Assets in a Typical Enterprise Environment
• Work with Endpoint and Network Telemetry
• Explain how to initiate Cisco XDR investigations from Splunk
• Explore the integration of Splunk and Cisco XDR through Webhooks or Atomic Actions

CED Solutions is your best choice for Cisco XDROPS, Cisco XDROPS training, Cisco XDROPS certification, Cisco XDROPS boot camp, Cisco XDROPS certification training, Cisco XDROPS certification course, Cisco XDROPS course, Cisco XDROPS class.