KL 048.2: Kaspersky XDR Expert. Administration

Categories: Kaspersky

About Course

Course description

Kaspersky XDR Expert is a reliable cybersecurity solution that helps protect corporate IT infrastructures against
advanced threats.
Kaspersky XDR Expert allows users to:

  • Collect, store and conveniently analyze telemetry.
  • Manually and automatically analyze collected data and detect threats.
  •  Comprehensively assess the level of corporate security using data from reports and the dashboard.
  •  Analyze cyber kill chain using the investigation graph.
  • Automatically and manually respond to threats. When combined with the product’s integration
    capabilities, this ability lets you implement complex protection scenarios.
  • Effectively manage collected data. The interface provides the user with convenient methods of
    interaction, including contextual search and response actions, data representation, and an investigation
    graph.
    The theoretical part of the course and hands-on labs provide participants with the knowledge and skills needed
    to plan and deploy the solution, understand how it works, and configure and maintain it.
    Threat detection, investigation and response are described in technical training KL 059.2

Course Outline

  •  1. General
  •  2. Capabilities
  •  3. Architecture
  •  4. Deployment
  •  5. Event collecting and processing
  • 6. Integrations
  • 7. Administration
  •  8. Maintenance

Labs

Lab 1. Install Kaspersky XDR Expert
Lab 2. Configure telemetry collection in Kaspersky XDR Expert
Lab 3. Configure Kaspersky XDR Expert integration with Sandbox
Lab 4. Configure authentication in Kaspersky XDR Expert via Active Directory
Lab 5. Configure Kaspersky XDR Expert integration with Kaspersky Threat Intelligence Portal
Lab 6. Configure Kaspersky XDR Expert integration with a mail server
Lab 7. Metrics and logs in Kaspersky XDR Expert
Lab 8. Kaspersky XDR Expert backup and restore
Lab 9. Migration from EDR 7.1 to Kaspersky XDR Expert

World Food Programme (WFP)

Our work with the World Food Programme (WFP) focused on enabling the effective adoption of digital field technologies and essential digital literacy capabilities. Participants utilized mobile-based data collection platforms within operational contexts, enhancing accuracy, consistency, and confidence in digital data handling. The engagement strengthened WFP’s ability to rely on digital tools to support field operations and humanitarian programs.

Raya

For Raya, we delivered technology enablement focused on automation-driven operations and scalable application development. Participants gained hands-on experience with automation technologies and modern front-end development frameworks, supporting more efficient processes and the delivery of flexible, high-performance digital solutions aligned with business growth objectives.

EgyptAir

Our engagement with EgyptAir focused on enabling the effective use of application development technologies alongside the adoption of cybersecurity and secure computing practices within operational environments. Participants worked with Microsoft-based development platforms and programming technologies while gaining practical exposure to secure application usage, access control mechanisms, and threat-aware system interaction. This integrated technology enablement supported more secure digital operations, improved system reliability, and reinforced cyber resilience across aviation technology environments.

Banque Misr

We collaborated with Banque Misr to enable integrated enterprise technology capabilities across multiple domains. The engagement supported effective utilization of IT infrastructure environments, data analytics platforms, and professional capability development frameworks, allowing teams to operate confidently within complex enterprise systems. Our delivery approach focused on practical technology adoption, operational alignment, and building sustainable competencies that support reliable banking services and informed, data-driven decision-making.

Course Booking Form