InsightIDR Certified Specialist

Course Description

Interested in eliminating false alerts and reducing your workload in your incident detection and response program? Whether you’re just getting started in information security or are migrating from another security solution, this two-day interactive, lab-driven course is designed to get you up and running quickly with InsightIDR.  This introductory-level course is geared toward providing product fundamentals along with the tips and tricks you need to successfully manage your incident response program.

For flexible and accessible learning, this course is offered both virtually and on-site at your facility. The class features simulated exercises against multiple scenario-driven target environments. 

All participants will have access to the InsightIDR Certified Specialist Exam as part of their training program.  Students will leave class with the tools and skills necessary to get started and build proficiency with the most common features of InsightIDR.

What You'll Learn

Introduction to InsightIDR

  • What it is and how it works
  • How InsightIDR helps disrupt the attack chain



  • Installing collectors
  • Configuring event sources
  • Installing intruder traps

Operation of InsightIDR

  • Searching event logs
  • Creating dashboards
  • Generating and scheduling reports
  • Investigating incidents



  • Configuring threats and alerts
  • Managing users, roles, and permissions

Day 1

Your first day will include an overview of InsightIDR, its components, and how they can work within your existing security environment. You will start by creating your own test environment to familiarize yourself with the components and generate your own sample data for an up-close view of the product's function.

  • Introduction
  • The Attack Chain
  • InsightIDR Architecture
  • Navigating the User Interface
  • Installing Collectors
  • Configuring Event Sources
  • Installing Honeypots
  • Managing Users

Day 2

Day 2 will focus on the day to day operation of InsightIDR and cover basic troubleshooting concepts. Still wondering how InsightIDR will address aspects of your particular environment? Our experts are available to advise in the latter half of the session.

  • Searching Results
  • Dashboards
  • Threats
  • Customizing Alerts
  • Investigating Incidents
  • Troubleshooting
  • Course Review & Practice Exam


Ideally, attendees should have the following:

  • Basic knowledge of information security concepts and terminology
  • Experience with Windows® and Linux Operating Systems
    • Command line familiarity is helpful, but not required


Open-enrollment class - $2,000 per student

On-site class - $7,000 per course plus travel & expenses, up to 5 attendees

Applicable CPEs: 16


Training Registration
InsightIDR Certified Specialist

Payment will open in a new window.
By submitting your registration, you are agreeing to our terms and conditions and acknowledge that all trainings are non-refundable.
Please note that this transaction may take up to two business days to go through our verification process.