Professional skills
Elastic Security for Endpoint
Investigate host-based alerts from Elastic Defend, enrich security data, and hunt threats on the endpoint.
THE BIG PICTURE
About this course
This course is built for analysts who use Elastic Security for Endpoint. It covers the components behind the Elastic Stack, Fleet, and Elastic Agent, then moves into Elastic Security and the use of visualizations, dashboards, and other parts of the Security App to triage alerts and investigate events in Timeline. Elastic notes this course as private delivery only. Contact MindClick for the delivery format, teaching language, instructor profile, duration, dates, and a written fee proposal. Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.
What you’ll learn
- Work confidently with elastic Stack overview in Elastic.
- Work confidently with security application in Elastic.
- Work confidently with elastic Defend in Elastic.
- Work confidently with elastic security enrichments in Elastic.
- Work confidently with threat hunting in Elastic.
A CLEAR PATH FORWARD
Recommended learning plan
Learn through guided exercises on an Elastic cluster, with discussion time and work you can take back to your own environment.
- Learning route
- 5 recommended days
- Practical work
- 5 guided activities
- Finish with
- A practical review
Take a look at each day. Open a section to see the topics and practical work.
Day 1Elastic Stack overviewExplore the essentials and put them to work.
What we’ll cover
- Elastic Stack overview
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 2Security applicationConsolidate the material and connect it to your own context.
What we’ll cover
- Security application
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 3Elastic DefendConsolidate the material and connect it to your own context.
What we’ll cover
- Elastic Defend
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 4Elastic security enrichmentsConsolidate the material and connect it to your own context.
What we’ll cover
- Elastic security enrichments
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 5Threat huntingBring the pieces together and plan your next steps.
What we’ll cover
- Threat hunting
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Bring it all together
Review your worked examples with the trainer and agree the next steps for your own role.
Before you choose your learning route
Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.
Fees
| Delivery format | Fee per learner | Exam fee |
|---|---|---|
| Live online | $2,800 USD | Not included |
| Classroom | $4,500 USD | Not included |
Awarding-body exam and certification fees are not included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.
Prerequisites
- Operating system knowledge for Windows and Linux: file systems and permissions, command line navigation, and the Windows registry. Networking fundamentals: common ports, protocols, and networking devices. Awareness of vulnerability and exploit methodology: reconnaissance, command and control, and persistence techniques.
Who is this course for?
- Endpoint-focused security analysts triaging host alerts.
- SOC teams deploying Elastic Defend with Fleet and Elastic Agent.
- Threat hunters enriching and correlating endpoint telemetry.
FIND YOUR START
Confirmed batch starts
Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.
Choose your country & monthStarts
- Training location
- Dubai, United Arab Emirates
- Local timezone
- Asia/Dubai
Joining details and full session timetable to be supplied.
Starts
- Training location
- Vienna, Austria
- Local timezone
- Europe/Vienna
Joining details and full session timetable to be supplied.
Starts
- Training location
- Sydney, Australia
- Local timezone
- Australia/Sydney
Joining details and full session timetable to be supplied.
Starts
- Training location
- Brussels, Belgium
- Local timezone
- Europe/Brussels
Joining details and full session timetable to be supplied.
Starts
- Training location
- Manama, Bahrain
- Local timezone
- Asia/Bahrain
Joining details and full session timetable to be supplied.
Starts
- Training location
- São Paulo, Brazil
- Local timezone
- America/Sao_Paulo
Joining details and full session timetable to be supplied.
Frequently asked questions
Is this an official Elastic course?
No. This is MindClick training and study support on Elastic products. It is not an official Elastic course and MindClick does not claim Elastic training-partner status. Elastic publishes its own instructor-led courses and certification exams at elastic.co/training.
How long is the training?
Elastic lists this topic at 24 hours. MindClick confirms the actual duration, session hours, and schedule for your individual or team inquiry.
What does it cost?
Fees depend on delivery format, group size, language, and location. Request a written proposal and confirm taxes, materials, and any exam fees before enrolling.
Will this guarantee I pass the Elastic certification exam?
No. Training supports your preparation, but Elastic sets the exam objectives and pass criteria. Completing training does not guarantee certification, an exam pass, or employment.
What does this course cost?
Outside India this 4-day course is listed at USD 2,800 per learner for live online delivery and USD 4,500 for classroom delivery. The certification exam fee is not included. Pricing for India is confirmed separately by an advisor. Taxes and the final offer are confirmed in writing before you pay.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Elasticsearch Engineer Training
This 4-day course builds practical skills in designing, indexing, querying, scaling, and operating a distributed search and analytics system.
Data Analysis with Kibana
A 4-day course on analysing data with a visual analytics interface: query, design charts and dashboards, explore time series, maps, ML and alerts.
Elastic Observability Engineer Training
A 4-day course where you ingest logs, metrics and traces, analyse them in dashboards, set alerts, and practise end-to-end incident workflows.
Elastic Security for SIEM
Four-day, 32-hour course to ingest data, query events, build dashboards, triage alerts, and hunt threats in a modern SIEM.