Join Hailey Shaw as she introduces the CrowdStrike zero to admin course, outlining EDR fundamentals, installation, troubleshooting, sensor updates, host management, and prevention policies with color-coded console, CLI, and notes.

Discover what CrowdStrike is and what EDR (end point detection and response) means, including signature, behavioral, and heuristic detections, with real-time monitoring and automated responses.

Navigate the CrowdStrike console and review the activity dashboard and cloud score. Learn to manage hosts, detections, policies, and dashboards, with guidance from built-in documentation.

Explore how to manage CrowdStrike users and roles, assign permissions, and provision Falcon admin access while guarding against overprivileged accounts. Study RTR roles and domain-based onboarding controls.

Demonstrate managing users and roles in CrowdStrike. Update user profiles, set UTC time zones, assign roles with safeguards against overprovisioning, and configure real-time response permissions and notifications.

Explore manual and automatic CrowdStrike sensor installations, register sensors with your console using your customer ID, and deploy across Windows, Linux, and Mac with best practices.

Configure host setup to install CrowdStrike sensors using installation tokens, with token rotation and audit logs. Download Windows, Mac, and Linux sensors and verify the agent runs.

Apply a practical troubleshooting checklist from module four for CrowdStrike Falcon admin, starting with simple OS, permissions, and installer checks, then address reduced functionality mode via the sensor dashboard.

Learn to uninstall CrowdStrike sensors and manage updates using group policies, maintenance tokens, and bulk maintenance mode with version controls (n-1, n-2) and throttling.

Explore managing sensor update policies across host groups by OS, set precedence, create latest policies, assign Linux/Windows/Mac hosts, and install or uninstall via CLI with maintenance tokens.

Explore dynamic and static host groups in CrowdStrike, learn to build multi-criteria filters (OS, AD, host IDs), understand policy precedence and tagging for scalable endpoint management.

Create dynamic host groups by operating system in CrowdStrike, apply assignment filters to Windows, Mac, and Linux, and monitor group policies and dashboards for host management.

Learn to create and assign prevention policies within CrowdStrike, organize hosts into groups, and tune detection versus prevention across phase one to phase three for scalable security.

Learn to configure and assign CrowdStrike prevention policies across Windows, Mac, and Linux by managing host groups, adjusting policy precedence, and enabling sensor visibility and next-gen antivirus settings.

Create and manage custom ioas to detect indicators of attack or compromise using regex and glob syntax, assign to prevention policies, and test before production.

Create and enable custom IOA rule groups for Windows, Mac, and Linux, then add process creation, network, and domain name rules, test regex patterns, and assign groups to prevention policies.

Explore exclusions and quarantines to whitelist trusted processes, manage IOAs and EOAs with glob and regex patterns, and understand sensor visibility and quarantine basics on Windows and Mac.

Create machine learning and IOA exclusions using glob patterns to whitelist legitimate programs across all hosts, and note sensor visibility exclusions require extreme caution.