FALCON 300: Falcon Administrator Optimization and Automation is a one-day advanced course designed to help experienced Falcon administrators operate and scale the CrowdStrike Falcon® platform in enterprise environments. Through hands-on exercises and real-world scenarios, participants will learn to design scalable architectures, automate administrative workflows, and resolve complex platform issues with confidence. The course equips senior administrators and platform owners with the practical skills needed to optimize performance, reduce manual effort through automation, and maintain platform health across large and complex deployments.
Course Highlights:
- Design and management of enterprise host group structures, policy architectures, and phased rollout strategies
- Optimization of prevention policies, exclusions, and machine learning settings for diverse workloads
- Automation of administrative workflows using Falcon APIs, PSFalcon, and Falcon Fusion SOAR
- Remote investigation and remediation of endpoints using Real Time Response (RTR)
- Advanced troubleshooting of sensor issues, performance analysis, and proactive health monitoring at scale