CrowdStrike University
Training

Join peers and industry leaders as they explore global cybersecurity challenges and reveal the latest innovations, intelligence and tools to help you stay ahead of the adversaries and stop breaches.

Intensive instructor-led
training

Join CrowdStrike experts for a curated selection of instructor-led training. In these classes, practitioners can learn what they need to know to get started with CrowdStrike, gain advanced skills to use on the job, and prep for exams to become a CrowdStrike certified professional. Full-day trainings and half-day certification prep classes will be available during Fal.Con.

CrowdStrike University training are limited availability courses offered Pre & Post Event. Additional registration (and fee) required in the Fal.Con registration portal.

Full-Day CSU Training Courses
available at Fal.Con:

Full day trainings run for 8 hours and are offered on Monday and Thursday; pre-and post Fal.Con. Laptops and pre-registration required. Cost: $1000/course (maximum of 1 course/day) or $900 Early Bird pricing before August 18.

FHT 200

Falcon Platform for Administrators

This course instructs new and beginning users on the technical fundamentals of CrowdStrike Falcon. The course is appropriate for those who use Falcon on a day-to-day basis and focuses on the installation, configuration and day-to-day management of the products. It is intended for technical contributors who will be administering and using the Falcon console.

Syllabus
FHT 201

Intermediate Falcon Platform for Responders

This course instructs intermediate responders in the best use of CrowdStrike® Falcon for incident triage. The course is appropriate for those who use the Falcon platform on a day-to-day basis to detect, investigate and respond to incidents. Positions might include security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator or channel sales engineer.

Syllabus
FHT 202

Investigating and Querying Event Data with Falcon EDR

This course is intended for roles who use Falcon Insight to detect, investigate and respond to incidents using proactive investigation techniques. It is appropriate for those who use CrowdStrike® Falcon to find evidence of incidents that did not raise alerts by other means. Positions might include hunt team members, security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator and channel sales engineers.

Syllabus
IDP 270

Protecting Workforce Identities with Falcon IDP

With more than 80% of data breaches involving compromised credentials, identity protection has never been a more pressing concern. This course will cover the Falcon Identity Protection module, and demonstrate how to configure, implement, and utilize the data feeds from Identity Protection to secure your organization against credential based attacks. Whether you want to monitor for weak or compromised passwords, analyze stale or stealthy administrators in your domain, or enforce MFA for high-risk users, this course will provide you the tools you need to leverage the Falcon Identity Protection toolset and lock down your domain. Syllabus to come.

CLOUD 223

Identify Risks in Your Cloud Environment with CSPM

Security in the cloud works very much like the security in an on-premises data center. But, once your cloud infrastructure is built, how do you secure it? This course will teach you how to use CrowdStrike's cloud security posture management (CSPM) module, CrowdStrike Falcon® Horizon, to secure your cloud environment configurations and remain in compliance with industry standards.

Find out how CSPM can help you determine if any of your cloud assets are misconfigured, if you are meeting your industry standards for security and if any behaviors affecting your cloud assets are malicious. During this course, you will locate cloud accounts with vulnerabilities, find the remediation steps to remediate them and learn where to communicate those findings.

Syllabus
CLOUD 271

Securing Cloud Workloads and Containers with Falcon Cloud Security

The complexity of public and private cloud infrastructure requires development teams to incorporate security into all aspects of the development lifecycle. In this course, you will learn how to use Falcon Cloud Security and “shift left” to protect containerized workloads and cloud-native applications.

With Falcon Cloud Security, you will learn to proactively identify common threats and mitigate risks at every stage of application development. This will help reduce the financial and reputational costs of breaches to your organization, as well as improve your overall security posture.

This course will cover security best practices for DevSecOps methodologies, the integration of security testing, vulnerability scanning, and provide practical, hands-on experience using Falcon Cloud Security. Syllabus to come.

Certification Prep Sessions

CrowdStrike University Certification Prep Sessions run for 4 hours and are offered on Monday and Thursday; pre-and post Fal.Con. Laptops and pre-registration required. Cost: $500/course (maximum of 1 course/day) or $450 Early Bird pricing before August 18.

CCFR Prep

Preparing for the CrowdStrike Certified Falcon Responder (CCFR) Exam

This workshop instructs new, beginner, and intermediate responders in the best use of CrowdStrike® Falcon for incident triage. The workshop is appropriate for those who use the Falcon platform on a day-to-day basis to detect, investigate, and respond to incidents. Positions might include security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator or channel sales engineer. This workshop will also provide a deep dive into the following topic areas:

  • Discuss the purpose of the exam
  • Describe the target audience of the exam
  • Review the competencies within the exam
  • Discuss competency areas frequently missed on exam
Register
CCFH Prep

Preparing for the CrowdStrike Certified Falcon Hunter (CCFH) Exam

This workshop is intended for responders and hunters who use Falcon Insight to detect, investigate and respond to incidents using proactive investigation techniques. It is appropriate for those who use CrowdStrike® Falcon to find evidence of incidents that did not raise alerts by other means. Positions might include hunt team members, security analyst, SOC analyst, security engineer, IT security operations manager, security administrator, endpoint security administrator and channel sales engineers. This workshop will also provide a deep dive into the following topic areas:

  • Discuss the purpose of the exam
  • Describe the target audience of the exam
  • Review the competencies within the exam
  • Discuss competency areas frequently missed on exam
Register
CCFA Prep

Preparing for the CrowdStrike Certified Falcon Administrator (CCFA) Exam

This workshop instructs system administrators on the technical fundamentals of CrowdStrike Falcon and is appropriate for those who use Falcon on a day-to-day basis and focuses on the installation, configuration, and day-to-day management of the products. The workshop will also provide a deep dive into the following topic areas:

  • Custom IOA Rules
  • Group Creation
  • Host Management
  • IOC Management
  • Notification Workflow
  • Sensor Reports
  • Prevention Policies
Register