extrahopsandbox.skilljar.com

Reset

Recommended Categories

Network Security

Network Performance

Recent Releases

Triggers Overview

Triggers Overview

Familiarize yourself with the concept of triggers and learn how to plan for a trigger.

Integration Troubleshooting

Integration Troubleshooting

Learn to troubleshoot issues with a third-party integration using Splunk as an example.

Modify Device Properties

Modify Device Properties

This module explains device properties collected by ExtraHop and how to modify them.

Triggers Best Practices

Triggers Best Practices

Explore essential best practices to craft efficient and impactful triggers.

Looking for live training?

Virtual Training

Remote learning experiences for maximum flexibility

On-Site Training

In-person training with an ExtraHop instructor

Live training sessions

Featured Learning Paths

ExtraHop System Overview

Get familiar with ExtraHop's core system components and their deployment.

Security Hardening

Explore known vulnerabilities and exposure risks. Identify related network activity as an initial step in hardening your IT ecosystem.

Unlock the full potential of your ExtraHop system with JavaScript trigger development. Learn how triggers enable collection of custom metrics, creation of custom detections, and more.

Go deeper into the Reveal(x) UI and learn to leverage advanced features.

Quick Start for New Users

Overview Pages

Get acquainted with the Reveal(x) Overview pages to take a look at your environment from a bird's-eye perspective.

Assets

This module provides basic instructions for reviewing and drilling down on metric data using the Assets page.

Detection Cards

Detection Cards

Examine detection cards and their properties in this introductory course.

Detection Investigation

Detection Investigation

Discover a simple detection investigation workflow.

Create a Basic Dashboard

Create a Basic Dashboard

Learn how to get started creating a dashboard.

Security Dashboard

Security Dashboard

Explore key security metrics that contribute to an environment's security hygiene using the Security dashboard.

Fundamentals Live Training

Attend live training with ExtraHop instructors

What's New in Reveal(x) 8.7

Learn what's new in Reveal(x) 8.7 with this overview video.

What's New in Reveal(x) 8.6

Learn what's new in Reveal(x) 8.6 with this overview video.

Fundamentals Live Training (Test Course AD)

Attend live training with ExtraHop instructors

Exam Test Course

Get acquainted with the Reveal(x) Overview pages to take a look at your environment from a bird's-eye perspective.

Onboarding Overview

ExtraHop Administrator Certification Exam (Beta)

Administration Essentials Certification

ExtraHop Detection SIEM Connector Bundle

This connector bundle allows users to integrate ExtraHop with SIEMs to share detection data via syslog.

Palo Alto Integration

This integration enables you to quarantine compromised devices on your Palo Alto firewall or in Panorama in real-time as specific detections or alerts are identified by the ExtraHop packet sensor.

CrowdStrike Network Containment Integration

This integration enables users to automatically contain endpoints in CrowdStrike Falcon based on conditions and thresholds found in ExtraHop detections

Active Directory Bundle (ARCHIVED)

The Active Directory Bundle (v4.1.2) provides triggers that build real-time metrics for Active Directory services like user accounts, computer accounts, DNS, LDAP, and more.

Cryptography Bundle

The Cryptography Bundle (v1.1) provides information related to TLS sessions such as version, certificate validity, ciphers, and key sizes. The included custom detection tracks any upcoming expiration of in-use certificates.

This bundle includes dashboards that provide critical visibility for remote and distributed workforces with large numbers of employees working from home.

Bundle Test Course

This bundle includes dashboards that provide critical visibility for remote and distributed workforces with large numbers of employees working from home.

This course is an introduction to how the ExtraHop platform's ability to store and retrieve individual transactions as records.

Essentials Certification Records

Microsoft Defender ATP Machine Isolation Integration

The Microsoft Defender ATP integration allows users to automatically collect investigation packages, run antivirus scans, and isolate machines that meet certain conditions and thresholds found in ExtraHop detections.

Dashboard Starter Kit Bundle

Start dashboarding using templates for dynamic HTTP, TLS, DB, CIFS, and LDAP monitoring. Customize included KPI-based templates to create personalized dashboards (v1.6.4).

Splunk Integration

The Splunk Integration (v1.1) enables users to connect ExtraHop Reveal(x) to a Splunk SIEM through the Splunk HEC. With this integration, users can send ExtraHop data to Splunk and track transactions.

Demisto Integration

Demisto is a security orchestration, automation, and response (SOAR) platform focused on the incident response that enables you to automate security workflows, manage incidents, and investigate underlying issues.

Essentials Bundle

The Essentials bundle offers our classic “Essentials” dashboards covering CIFS/SMB, Database, DNS, FTP, and SMTP, revamped and ready for Reveal(x) Enterprise or 360.

Forescout Network Containment Integration

Forescout integration is used to bring security tools together to take action remediating and alerting when a detection has been found on the ExtraHop appliance for corresponding ForeScout hosts.

Prioritizing Critical Assets

This course is an introduction to the mechanism for tuning the ExtraHop platform to perform the highest level of analysis on your most critical assets.

Essentials Certification Analysis Priorities

Integrating with Tools and Technology

This course is an introduction to the mechanism for integrating the ExtraHop platform with other tools and technology.

Essentials Certification Integrations

Storing Analysis Data

This course explains how ExtraHop platforms store different types of metric and wire data.

Essentials Certification Metrics

Custom Wire Data Metrics

This course is an introduction to the ExtraHop platform's ability to collect custom metrics from your wire data.

Essentials Certification Metrics

Detection Cards

Examine detection cards and their properties in this introductory course.

Onboarding Detections

Cloud Traffic In and Out

Discover a simple method for reviewing traffic to and from cloud services.

Onboarding Overview Workflows

Security Dashboard

Explore key security metrics that contribute to an environment's security hygiene using the Security dashboard.

Onboarding Security Dashboard

Inverse Filters

Learn to use inverse filtering and determine how often a requested resource is returned.

Onboarding Overview Workflows

This course is an introduction to the ExtraHop platform's ability to capture and retrieve packets.

Essentials Certification Packets

This course is an introduction to the different types of metrics created by the ExtraHop platform.

Essentials Certification Metrics

Wire Data Processing

This course is an introduction to the ExtraHop process for creating metrics from wire data.

Essentials Certification

Application Containers

Application containers allow you to organize metrics using attributes of the data. This module is an introduction into that organizational concept.

Essentials Certification Application Containers

Autodiscovery and Grouping

This course is an introduction to the ExtraHop platform device/metric grouping capability and auto-discovery concept.

Essentials Certification Device Discovery

ExtraHop Infrastructure

This course is an introduction to the infrastructure components that drive the unified ExtraHop user interface.

Essentials Certification

ExtraHop Platform Overview

This course is an introductory overview of the ExtraHop platform and workflows.

Essentials Certification

Asymmetric Encryption

This module explains asymmetric encryption and highlights some differences between asymmetric encryption and symmetric encryption.

BIG DUMB COURSE

Ignore me! Testing Articulate Export settings. Spooky!

Anomaly Detection

This course is an introduction to the machine learning, anomaly and event detection capability of the ExtraHop platform.

Detections Essentials Certification

Reveal(x) Overview

Distinguish Reveal(x) 360 from Reveal(x) Enterprise in this course.

Reveal(x) 360 Onboarding ExtraHop Administrator

This course introduces encryption, discusses common components of cipher suites, and demonstrates how to explore cipher suites in Reveal(x).

Check Point Identity Awareness Integration

ExtraHop and the Check Point Identity Awareness gateway integrate to provide immediate and automated remediation of cybersecurity threats, including device quarantine.

Capturing Wire Data

This course is an introduction to the ExtraHop platform's technical architecture and capability around wire data processing and auto-discovery.

Essentials Certification

ExtraHop Concepts

This learning path contains courses to familiarize you with the ExtraHop platform.

Connect to the Reveal(x) 360 Console

Walk through the process of connecting packet sensors (EDAs) and packetstores (ETAs) to the Reveal(x) 360 Console.

Reveal(x) 360 Onboarding

ExtraHop Platform Overview

This course is an introductory overview of the ExtraHop platform and workflows.

Essentials Certification

This course is an introduction to the ExtraHop platform's ability to capture and retrieve packets.

Essentials Certification Packets

Wire Data Processing

This course is an introduction to the ExtraHop process for creating metrics from wire data.

Essentials Certification

Custom Wire Data Metrics

This course is an introduction to the ExtraHop platform's ability to collect custom metrics from your wire data.

Essentials Certification Metrics

Autodiscovery and Grouping

This course is an introduction to the ExtraHop platform device/metric grouping capability and auto-discovery concept.

Essentials Certification Device Discovery

Storing Analysis Data

This course explains how ExtraHop platforms store different types of metric and wire data.

Essentials Certification Metrics

Application Containers

Application containers allow you to organize metrics using attributes of the data. This module is an introduction into that organizational concept.

Essentials Certification Application Containers

Prioritizing Critical Assets

This course is an introduction to the mechanism for tuning the ExtraHop platform to perform the highest level of analysis on your most critical assets.

Essentials Certification Analysis Priorities

Integrating with Tools and Technology

This course is an introduction to the mechanism for integrating the ExtraHop platform with other tools and technology.

Essentials Certification Integrations

Anomaly Detection

This course is an introduction to the machine learning, anomaly and event detection capability of the ExtraHop platform.

Detections Essentials Certification

ExtraHop Infrastructure

This course is an introduction to the infrastructure components that drive the unified ExtraHop user interface.

Essentials Certification

Capturing Wire Data

This course is an introduction to the ExtraHop platform's technical architecture and capability around wire data processing and auto-discovery.

Essentials Certification

This course is an introduction to the different types of metrics created by the ExtraHop platform.

Essentials Certification Metrics

This course is an introduction to how the ExtraHop platform's ability to store and retrieve individual transactions as records.

Essentials Certification Records