| Topic | Details |
| Topic 1 | - Rules Configuration: This domain involves creating custom IOA rules, configuring exclusions to resolve false positives, managing IOC settings for threat detection, and configuring CID-wide General Settings.
|
| Topic 2 | - Workflows: This domain focuses on configuring automated workflows that execute predefined actions when specific triggers or conditions are met.
|
| Topic 3 | - Sensor Deployment: This domain focuses on verifying installation prerequisites, applying default policies and best practices, uninstalling sensors, and troubleshooting sensor issues across supported operating systems.
|
| Topic 4 | - Policy Application: This domain encompasses configuring prevention policies for security posture, sensor update policies, RTR audit policies, containment policies with IP exclusions, and managing quarantined files.
|