This course requires completion of the WitFoo Certified User course before beginning. The course prepares engineers to design and deploy effective WitFoo Precinct Deployments.

The course has one module:

• WitFoo Precinct Architecture

The module has a required video that must be watched. Once the video is completed, a quiz must be passed with a score of 80% or higher on each section.

The WitFoo Certified User training proves an analyst is able to fully understand WitFoo Precinct setup and workflow.  As you go through each section, it is important to watch the video AND read the text before taking the quiz.  You must answer at least 76% of the questions in each quiz correctly to pass the module.  The modules included in this learning track are:

Precinct Deployment and Setup – learn how to deploy the WitFoo Virtual Appliance and setup Precinct to begin ingesting and analyzing data.

Precinct Configuration – learn how to deploy the WitFoo Virtual Appliance and setup Precinct to begin ingesting and analyzing data.

Precinct Mechanics – learn how data is collected, suspicion score is calculated, and how labs work.

Investigate Workflow – learn how to get work done in the Detective component of WitFoo Precinct.

Reports Overview – learn which reports are available and what the data in the reports mean to the security practice.