DFIR130 - OpenText Endpoint Investigator | Endpoint Forensics and Response Training
Format: Instructor-Led
Duration: 4 Days
Role(s): Analyst
Find a Class
Interested in a Learning Subscription?
More information about Learning Subscriptions
Have questions about training?
Course Description
This hands-on course involves practical exercises and real-life simulations in the use of OpenText™ Endpoint Investigator and OpenText™ Endpoint Forensics & Response. The class provides participants with instruction on conducting previews, acquisitions, and searches, to name a few. The course concludes with instruction on using remediation functionality to stop unauthorized process from continuing to run.
Delivery method: Classroom. NASBA defined level: basic.
CPE Credits - 32
Students attending this course will learn the following:
-
OpenText Endpoint Investigator
- How to deploy the agent, which enables the examination of network nodes remotely.
- How to preview and acquire remote data, both at a physical (sector-by-sector) level and logically.
- How to preview and acquire physical memory (RAM) and capture a snapshot of volatile data, including open ports and running processes.
- Using rapid collection to acquire data.
- How to use the OpenText Endpoint Forensics & Response Snapshot function to acquire volatile data.
- How to preview and collect data using the rapid preview OpenText Endpoint Investigator functionality.
- Acquiring RAM.
- The importance of conducting both logical and physical acquisitions.
- Implementing the universal agent and Agent Management.
- How to create and implement raw keyword searches and index searches.
- How to collect data by using the universal agent.
- How to navigate, filter, sort, and search data shown in the OpenText Endpoint Investigator interface.
- How to use the Evidence Processor to identify email and Internet artifacts.
- How to bookmark notable data and build a case report.
- OpenText Endpoint Forensics & Response
- How to manage user accounts.
- How to deploy the universal agent.
- How to manage groups and targets.
- How to create an investigation.
- How to navigate the web application.
- How to compare snapshots.
- How to use automated response.
- How to acquire RAM.
- How to create filters for data collection and/or indicators of compromise searches.
- How to use rapid preview and collect data.
- How to find items of interest.
- How to search for indicators of compromise (IOC).
- How to search and remediate from the Windows registry.
- How to isolate an endpoint.
- How to remediate processes.
Prerequisites
Basic computer skills. Advance preparation for this course is not required.
Pricing
| Format | Currency | Price |
|---|---|---|
| Per Student | € | 3,200.00 |
| Per Student | GBP | 2,600.00 |
| Per Student | USD | 3,600.00 |
Taxes: All prices exclude VAT or other taxes where applicable (all currencies).
Extra expenses: Customer site course prices do not include instructor travel expenses, which are billed separately.
Reservations: Please provide a minimum of 3 weeks advance notice when arranging courses at customer sites.
Class Schedule
See available dates and locations below.
| Start Date | End Date | Start Time | TimeZone | Session Duration | Language | Location | Price | Currency | Guaranteed To Run | Add |
|---|---|---|---|---|---|---|---|---|---|---|
| Oct 06, 2026 | Oct 09, 2026 | 08:00 | (UTC-07:00) America/Los_Angeles (PDT) | Full Day | English | Virtual Classroom | North America (PT) | 3,600.00 | USD | ✔ | Add to cart |
| Dec 01, 2026 | Dec 03, 2026 | 08:00 | (UTC+00:00) Europe/London (GMT) | Full Day | English | GBR | Reading | OpenText | 2,600.00 | GBP | Add to cart | |
| Dec 01, 2026 | Dec 03, 2026 | 08:00 | (UTC+00:00) Europe/London (GMT) | Full Day | English | Virtual Classroom | UK | 2,600.00 | GBP | Add to cart | |
| Apr 06, 2027 | Apr 09, 2027 | 08:00 | (UTC-05:00) Eastern Time (US & Canada) | Full Day | English | USA | Gaithersburg, MD | OpenText | 3,600.00 | USD | Add to cart | |
| Apr 06, 2027 | Apr 09, 2027 | 08:00 | (UTC-05:00) Eastern Time (US & Canada) | Full Day | English | Virtual Classroom | North America (ET) | 3,600.00 | USD | Add to cart | |
| May 04, 2027 | May 07, 2027 | 08:00 | (UTC-08:00) Pacific Time (US & Canada) | Full Day | English | USA | Pasadena, CA | OpenText | 3,600.00 | USD | Add to cart | |
| May 04, 2027 | May 07, 2027 | 08:00 | (UTC-08:00) Pacific Time (US & Canada) | Full Day | English | Virtual Classroom | North America (PT) | 3,600.00 | USD | Add to cart | |
| Jun 08, 2027 | Jun 11, 2027 | 08:00 | (UTC) Dublin, Edinburgh, Lisbon, London | Full Day | English | GBR | Reading | OpenText | 2,600.00 | GBP | Add to cart | |
| Jun 08, 2027 | Jun 11, 2027 | 08:00 | (UTC) Dublin, Edinburgh, Lisbon, London | Full Day | English | Virtual Classroom | UK | 2,600.00 | GBP | Add to cart | |
| Aug 10, 2027 | Aug 13, 2027 | 08:00 | (UTC-05:00) Eastern Time (US & Canada) | Full Day | English | USA | Gaithersburg, MD | OpenText | 3,600.00 | USD | Add to cart | |
| Aug 10, 2027 | Aug 13, 2027 | 08:00 | (UTC-05:00) Eastern Time (US & Canada) | Full Day | English | Virtual Classroom | North America (ET) | 3,600.00 | USD | Add to cart | |
| Oct 05, 2027 | Oct 08, 2027 | 08:00 | (UTC-08:00) Pacific Time (US & Canada) | Full Day | English | Virtual Classroom | North America (PT) | 3,600.00 | USD | Add to cart | |
| Oct 05, 2027 | Oct 08, 2027 | 08:00 | (UTC-08:00) Pacific Time (US & Canada) | Full Day | English | USA | Pasadena, CA | OpenText | 3,600.00 | USD | Add to cart | |
| Dec 07, 2027 | Dec 10, 2027 | 08:00 | (UTC) Dublin, Edinburgh, Lisbon, London | Full Day | English | GBR | Reading | OpenText | 2,600.00 | GBP | Add to cart | |
| Dec 07, 2027 | Dec 10, 2027 | 08:00 | (UTC) Dublin, Edinburgh, Lisbon, London | Full Day | English | Virtual Classroom | UK | 2,600.00 | GBP | Add to cart |