SNCF-300-710 · Module
Integration: Malware Defense, Endpoint, Threat Intel and the SOC Stack
10 lessons, 0 written.
SNCF-300-710 Lessons in This Module
01 M8 · Lab 1: Wire the Ecosystem - Endpoints, ISE, Feeds and the Cloud Consoles In Production 02 Malware Defense: File Policies, Dispositions, Dynamic Analysis and Retrospection In Production 03 Integrating Secure Endpoint with FMC: Connection, Event Streaming and Endpoint IoCs In Production 04 Security Intelligence: Authoring, Sharing & Consumption In Production 05 Threat Intelligence Director: STIX/TAXII Feeds, Observables, Incidents and Elements In Production 06 FMC and ISE over pxGrid: Identity Mapping, SGT Exchange and Session Awareness In Production 07 Rapid Threat Containment: Remediation Modules, ANC Policies and Automatic Quarantine In Production 08 Cisco XDR Investigations Driven from the Firewall In Production 09 Off-Box Logging I: Cisco Security Analytics and Logging (SaaS and On-Prem) In Production 10 Off-Box Logging II: Splunk Integration and AI-Driven Threat Intelligence In Production Lab state
Where this module picks the lab up, and what it hands on.
🔬 At module entry
Continues from sncf-security-cloud-control.
💾 At module exit
The lab is left at the end state of Off-Box Logging II: Splunk Integration and AI-Driven Threat Intelligence. Tear nothing down — the next module builds on it.
Devices in scope: FTD-EDGE-01 · FMC-01 · WS-INSIDE-01 · WS-INSIDE-02 · ATK-KALI-01 · WS-ADMIN-01 · ISE-01 · SRV-CLOUD-01 · SW-ACCESS-01 · SRV-WEB-01 · R-ISP-01
Workbook & cheat sheet
The printable module cheat sheet is not built yet — the print stylesheet is listed as open work in DESIGN-SYSTEM.md §7.