KL 025.8: Kaspersky Anti Targeted Attack Platform. Kaspersky EDR. Administration

Categories: Kaspersky

About Course

Featured Products

  • Kaspersky Anti Targeted Attack Platform 8.0
  • Kaspersky Security Center 16 Administration Server
  • Kaspersky Endpoint Security for Windows 12.12
  • Kaspersky Endpoint Security for Linux 12.4

Course Description

Kaspersky Anti Targeted Attack Platform is a solution designed to protect an organization’s IT infrastructure and detect sophisticated threats, such as zero-day attacks, targeted attacks, and Advanced Persistent Threats (APTs).

The solution is designed for enterprises and consists of the following functional blocks:

  • Kaspersky Anti Targeted Attack (KATA): Protects the perimeter of the corporate IT infrastructure.
  • Network Detection and Response (NDR): Protects the organization’s internal network.

The theoretical part of the course, combined with hands-on labs, provides participants with the knowledge needed to understand how the solution works and the practical skills required to deploy and administer it.

1. Pre-Deployment

1.1. Components and Capabilities
1.2. Deployment Schemas, Scaling, and Compatibility

2. KATA Platform Deployment

2.1. Central Node and Sensor Installation
2.2. Installing and Configuring Sandbox
2.3. Preparing Central Node for Operation
2.4. Interconnecting the Servers
2.5. Connecting to Traffic Sources
2.6. Retrospective Traffic Analysis

Labs

Lab 1: Central Node Installation and Initial Setup
Lab 2: Creating a Distributed Solution
Lab 3: Configuring KATA Sandbox
Lab 4: Connecting KATA Platform to the Infrastructure

3. Installing and Configuring Endpoint Agent

3.1. Centralized Installation
3.2. Local Installation
3.3. Configuring NDR Agents
3.4. File Submission to Sandbox
3.5. Checking Installation Health

Lab

Lab 5: KES Installation Using Administration Server

4. KATA Platform Maintenance

4.1. Password Policies
4.2. Connectors
4.3. KATA API
4.4. NDR API
4.5. Email Notifications (KATA, NDR)
4.6. Integration with SIEM (KATA, NDR, KUMA)
4.7. Active Polling
4.8. NGFW Integration
4.9. Server Monitoring Using SNMP
4.10. KATA Platform Logs
4.11. Gathering Diagnostic Data for Technical Support
4.12. Data Backup and Restore
4.13. KATA Platform Upgrade

Labs

Lab 6: Sending Notifications and NDR Events by Email and to the SIEM System
Lab 7: Working with the API
Lab 8: KATA Platform Integration with Active Directory and Adding Domain Users
Lab 9: Viewing Logs and Creating a Backup Copy

 

 

World Food Programme (WFP)

Our work with the World Food Programme (WFP) focused on enabling the effective adoption of digital field technologies and essential digital literacy capabilities. Participants utilized mobile-based data collection platforms within operational contexts, enhancing accuracy, consistency, and confidence in digital data handling. The engagement strengthened WFP’s ability to rely on digital tools to support field operations and humanitarian programs.

Raya

For Raya, we delivered technology enablement focused on automation-driven operations and scalable application development. Participants gained hands-on experience with automation technologies and modern front-end development frameworks, supporting more efficient processes and the delivery of flexible, high-performance digital solutions aligned with business growth objectives.

EgyptAir

Our engagement with EgyptAir focused on enabling the effective use of application development technologies alongside the adoption of cybersecurity and secure computing practices within operational environments. Participants worked with Microsoft-based development platforms and programming technologies while gaining practical exposure to secure application usage, access control mechanisms, and threat-aware system interaction. This integrated technology enablement supported more secure digital operations, improved system reliability, and reinforced cyber resilience across aviation technology environments.

Banque Misr

We collaborated with Banque Misr to enable integrated enterprise technology capabilities across multiple domains. The engagement supported effective utilization of IT infrastructure environments, data analytics platforms, and professional capability development frameworks, allowing teams to operate confidently within complex enterprise systems. Our delivery approach focused on practical technology adoption, operational alignment, and building sustainable competencies that support reliable banking services and informed, data-driven decision-making.

Course Booking Form