CrowdStrike Training

CrowdStrike is a cloud-based SaaS solution delivering endpoint protection leveraging machine learning techniques to provide next-generation anti-virus, threat intelligence, and cyberattack response services. Penn Information Systems and Computing (ISC) licensed a set number of CrowdStrike licenses to provide Schools and Centers with the ability to protect sensitive information and computing assets from cyber-attacks. More information about CrowdStrike is available at ISC’s CrowdStrike webpage [1].

FALCON ENDPOINT PROTECTION SOLUTION

CrowdStrike offers many products including Falcon Endpoint protection which detects both known and unknown samples of malware. It collects and inspects event information in real-time to prevent and detect attacks.

CROWDSTRIKE TRAINING

Before using CrowdStrike Falcon Endpoint, we advise taking the CrowdStrike Certified Falcon Administrator (CCFA) training and certification exam. The exam is to evaluate your knowledge and skills to manage various components of the Falcon Platform. To secure an exam voucher contact ISC Client Care. Because ISC has a limited number of training credits and exam vouchers, before requesting to take 1) any exam (including CCFA) or 2) training above the 100 level, we ask that you first submit your request to ISC Client Care to provision the required exam voucher or training credits for your account. Schools or Centers who do not first request through Client Care may be billed the cost of their training/exam.

In addition, access to the CrowdStrike Support Portal allows you to join discussions on specific practices and topics, view articles and videos on applications and techniques, and ask support questions in real-time. Support cases should be submitted after a discussion with ISC Client Care as the first line of support.

ACCESS TO TRAINING

CROWDSTRIKE UNIVERSITY

Access to CrowdStrike University [2] is granted when ISC Client Care requests access for you. ISC secured a limited number of licensed seats for the training and exam vouchers. After you are given a training seat, you’ll receive an invitation email from CrowdStrike to CrowdStrike University. The email includes your login details with your username set as your Penn email address. Once you click on the link, you are directed to a CrowdStrike University login webpage where you’ll set your password.

There is a list of courses available in the CrowdStrike University catalog [3]. Visit the Content Library and then View All Courses. We recommend you start with the CrowdStrike University Orientation course to learn how to navigate the University courses and platform. Then, continue to take the CrowdStrike Certified Falcon Administrator (CCFA) course. This course encompasses four Falcon Administrator basic sections (numbered FHT100 – FHT120) which take approximately 8 hours to complete in total. You can complete it in increments or dedicate a full workday to the training. Before requesting to take the exam, you’ll need to first request access from ISC Client Care to provision a voucher for you. Note, once you start the exam, you cannot stop it, so you’ll want to make sure you’ve set aside enough time to finish it before starting.

Individuals with information security roles may consider taking CrowdStrike Certified Falcon Hunter and CrowdStrike Certified Falcon Responder. Access for these training credits and vouchers should also be requested through ISC Client Care.

CROWDSTRIKE UNIVERSITY AUDIENCE

CrowdStrike University is a teaching and learning platform aimed for IT staff interested in using CrowdStrike products and pursuing certification. The courses tailored for IT SOC, IT Security Managers, Security Administrator, Endpoint Security Administrator, and IT Endpoint Support Staff.

CROWDSTRIKE SUPPORT PORTAL

As a CrowdStrike Administrator, you’ll receive an invitation to the CrowdStrike Support Portal [4] with your username set as your Penn email address. The email invitation from CrowdStrike contains a link to its Support Portal https://supportportal.crowdstrike.com/s/

Go ahead and set your password by entering your username and requesting a password reset. An email to reset your password will be sent to you to set a CrowdStrike Support Portal password. Please note that your password for the Support Portal differs from the one you’ll set to access CrowdStrike University.

There are plenty of videos on the CrowdStrike Support Portal ranging from an introduction to an application (e.g., What is an API? Application Programming Interface) to small bites of walkthrough application best practices (e.g., Start-Up 1-3; Group Assignment, Group Policy, and Policy Group Management).

Falcon Administrators with a Support Portal account should sign up for Tech Alerts and Release Notes. As a Falcon Administrator, you are encouraged to submit requests for support to Client Care and not directly into the CrowdStrike Support Portal. Please note, to ensure the highest level of support, Client Care has the ability to see all submitted cases in the Support Portal.

CROWDSTRIKE SUPPORT PORTAL AUDIENCE

All individuals with various IT interests can benefit from the information posted to the CrowdStrike Support Portal.

REFERENCES

[1] University of Pennsylvania CrowdStrike Informational Page https://www.isc.upenn.edu/security/crowdStrike

[2] CrowdStrike University https://www.crowdstrike.com/endpoint-security-products/crowdstrike-university/

[3]CrowdStrike University Training Catalog https://www.crowdstrike.com/wp-content/brochures/cs-university/CrowdStrike_Training_Catalog_EX.pdf[

4] CrowdStrike Support Portal https://supportportal.crowdstrike.com/s/th

CROWDSTRIKE TRAINING RESOURCES

CROWDSTRIKE UNIVERSITY: https://crowdstrike.litmos.com/