CrowdStrike University
Training

Join peers and industry leaders as they explore global cybersecurity challenges and reveal the latest innovations, intelligence and tools to help you stay ahead of the adversaries and stop breaches.

Intensive instructor-led
training

Join CrowdStrike experts for a curated selection of instructor-led training. In these classes, practitioners can learn what they need to know to get started with CrowdStrike, gain advanced skills to use on the job, and prep for exams to become a CrowdStrike certified professional. Full-day trainings and half-day certification prep classes will be available during Fal.Con.

Pre-purchased CSU credits may be applied to the CrowdStrike University Training courses at Fal.Con. Full day courses require 2 credits; certification courses require 1 credit. Please connect with your account representative to use the credits at Fal.Con.

CrowdStrike University trainings are limited availability courses offered Pre & Post Event. Additional registration (and fee) required in the Fal.Con registration portal.

View the Fal.Con agenda and choose from 100+ sessions to create a Fal.Con experience tailored to your areas of interest.

Full-Day CSU Training Courses
available at Fal.Con:

Full day trainings run for 8 hours and are offered on Monday and/or Thursday; pre-and post Fal.Con. Laptops and pre-registration required. Cost: $1000/course (maximum of 1 course/day) or $900 Early Bird pricing before August 18.

FHT 200

Falcon Platform for Administrators

This course instructs new and beginning users on the technical fundamentals of CrowdStrike Falcon. The course is appropriate for those who use Falcon on a day-to-day basis and focuses on the installation, configuration and day-to-day management of the products. It is intended for technical contributors who will be administering and using the Falcon console.
Offered: Monday, September 18 & Thursday, September 21 | 9:00am - 5:00pm

Syllabus
FHT 201

Intermediate Falcon Platform for Responders

This course instructs intermediate responders in the best use of CrowdStrike® Falcon for incident triage. The course is appropriate for those who use the Falcon platform on a day-to-day basis to detect, investigate and respond to incidents. Positions might include security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator or channel sales engineer.
Offered: Monday, September 18 & Thursday, September 21 | 9:00am - 5:00pm

Syllabus
FHT 202

Investigating and Querying Event Data with Falcon EDR

This course is intended for roles who use Falcon Insight to detect, investigate and respond to incidents using proactive investigation techniques. It is appropriate for those who use CrowdStrike® Falcon to find evidence of incidents that did not raise alerts by other means. Positions might include hunt team members, security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator and channel sales engineers.
Offered: Monday, September 18 & Thursday, September 21 | 9:00am - 5:00pm

Syllabus
IDP 270

Protecting Workforce Identities with Falcon IDP

With more than 80% of data breaches involving compromised credentials, identity protection has never been a more pressing concern. This course will cover the Falcon Identity Protection module, and demonstrate how to configure, implement, and utilize the data feeds from Identity Protection to secure your organization against credential based attacks. Whether you want to monitor for weak or compromised passwords, analyze stale or stealthy administrators in your domain, or enforce MFA for high-risk users, this course will provide you the tools you need to leverage the Falcon Identity Protection toolset and lock down your domain. Syllabus to come.
Offered: Monday, September 18 & Thursday, September 21 | 9:00am - 5:00pm

Syllabus
CLOUD 223

Identify Risks in Your Cloud Environment with CSPM

Security in the cloud works very much like the security in an on-premises data center. But, once your cloud infrastructure is built, how do you secure it? This course will teach you how to use CrowdStrike's cloud security posture management (CSPM) module, CrowdStrike Falcon® Horizon, to secure your cloud environment configurations and remain in compliance with industry standards.

Find out how CSPM can help you determine if any of your cloud assets are misconfigured, if you are meeting your industry standards for security and if any behaviors affecting your cloud assets are malicious. During this course, you will locate cloud accounts with vulnerabilities, find the remediation steps to remediate them and learn where to communicate those findings.
Offered: Monday, September 18 | 9:00am - 5:00pm

Syllabus
CLOUD 271

Securing Cloud Workloads and Containers with Falcon Cloud Security

The complexity of public and private cloud infrastructure requires development teams to incorporate security into all aspects of the development lifecycle. In CLOUD 271: Securing Cloud Workloads and Containers with Falcon Cloud Security, you will learn to use CrowdStrike Falcon® Cloud Security and “shift left” to protect containerized workloads and cloud-native applications.

This course includes security best practices and tips for using Falcon Cloud Security to mitigate common threats to cloud workloads. You will learn to proactively identify common threats and mitigate risks at every stage of application development. Learn how to avoid the financial and reputational costs of breaches to your organization, as well as improve your overall security posture.
Offered: Thursday, September 21 | 9:00am - 5:00pm

Syllabus
LOG 201

Preparing, Ingesting, and Parsing Log Data using Falcon LogScale

Does your organization use Falcon LogScale to aggregate and search data from a wide variety of log sources at scale? This course offers a deep dive into preparing, ingesting, and parsing datasets using CrowdStrike Falcon® LogScale. Designed for those who are new to the field or looking to refresh their skills, the course presents techniques for data cleaning, dimensionality reduction, normalization, and statistical interpretation. Delve into key data analysis terminology, familiarize yourself with widely-used log formats, and discover proven methods for data preparation. This course is especially beneficial for roles such as data analysts, IT administrators, and log management specialists.
Offered: Monday, September 18 | 9:00am - 5:00pm

LOG 202

Analyze Logs, Visualize Data, and Answer Business-Critical Questions using Falcon LogScale

Are you responsible for analyzing data to provide actionable insights for your organization? In this immersive course, gain hands-on experience with CrowdStrike Falcon® LogScale for analyzing logs, visualizing data, and answering business-critical questions. Learn to design compelling widgets and dashboards, optimize dashboard interactions , and strategically architect parameterized dashboards using the CrowdStrike Falcon® LogScale Query Language (LQL).This course is especially beneficial for roles such as data analysts, IT administrators, and log management specialists.
Offered: Thursday, September 21 | 9:00am - 5:00pm

Syllabus

Certification Prep Sessions

CrowdStrike University Certification Prep Sessions run for 4 hours and are offered on Monday and Thursday; pre-and post-Fal.Con. Pre-registration is required. Cost: $500/course (maximum of 1 course/day) or $450 Early Bird pricing before August 18.

Students will receive a self-paced lab guide after the Prep Sessions to continue preparation post-Fal.Con.

CCFR Prep

Preparing for the CrowdStrike Certified Falcon Responder (CCFR) Exam

This workshop instructs new, beginner, and intermediate responders in the best use of CrowdStrike® Falcon for incident triage. The workshop is appropriate for those who use the Falcon platform on a day-to-day basis to detect, investigate, and respond to incidents. Positions might include security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator or channel sales engineer. This workshop will also provide a deep dive into the following topic areas:

  • Discuss the purpose of the exam
  • Describe the target audience of the exam
  • Review the competencies within the exam
  • Discuss competency areas frequently missed on exam

Offered: Monday, September 18 & Thursday, September 21 | 1:00pm - 5:00pm

Register
CCFH Prep

Preparing for the CrowdStrike Certified Falcon Hunter (CCFH) Exam

This workshop is intended for responders and hunters who use Falcon Insight to detect, investigate and respond to incidents using proactive investigation techniques. It is appropriate for those who use CrowdStrike® Falcon to find evidence of incidents that did not raise alerts by other means. Positions might include hunt team members, security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator and channel sales engineers. This workshop will also provide a deep dive into the following topic areas:

  • Discuss the purpose of the exam
  • Describe the target audience of the exam
  • Review the competencies within the exam
  • Discuss competency areas frequently missed on exam

Offered: Monday, September 18 & Thursday, September 21 | 1:00pm - 5:00pm

Register
CCFA Prep

Preparing for the CrowdStrike Certified Falcon Administrator (CCFA) Exam

This workshop instructs system administrators on the technical fundamentals of CrowdStrike Falcon and is appropriate for those who use Falcon on a day-to-day basis and focuses on the installation, configuration and day-to-day management of the products. The workshop will also provide a deep dive into the following topic areas:

  • Discuss the purpose of the exam
  • Describe the target audience of the exam
  • Review the competencies within the exam
  • Discuss competency areas frequently missed on exam

Offered: Monday, September 18 & Thursday, September 21 | 1:00pm - 5:00pm

Register