1. CrowdStrike CCFR Training | Exam Guide, CCFR Basics & MITRE ATT&CK Framework Introduction

This session marks the beginning of the CrowdStrike Certified Falcon Responder (CCFR) training series. In this first session, we kick off by walking through the official CCFR exam guide that will serve as our table of contents for the entire course - every subtopic from 1 to 6 will be covered through dedicated slides and explanations. We then dive into the fundamentals of CCFR and wrap up with an introduction to the first major exam topic: Attack Frameworks, starting with the MITRE ATT&CK Enterprise Matrix. Chapters 0:00 - Exam Guide Walkthrough 9:56 - Introduction to CCFR and Basics 35:26 - Attack Frameworks: MITRE ATT&CK Slide & Enterprise Matrix Explained (Topic 1.1) 📌 Topics Covered in this Session 🔹 CCFR Exam Guide Walkthrough • Overview of the official exam guide and how it will structure this entire training series • How each subtopic (1–6) will be covered through slides and practical explanation 🔹 Basics of CCFR • What is CrowdStrike Falcon Responder (CCFR)? • Role & Responsibilities of a Falcon Responder • Key Skills Covered in the CCFR Certification 🔹 Topic 1: Attack Frameworks (Official Exam Guide) • Introduction to Attack Frameworks in the context of CCFR • Overview of the MITRE ATT&CK Enterprise Matrix • 1.1 — Understand what information the MITRE ATT&CK framework provides ⏭️ What's Coming in Session 2 In the next session, we will continue with Topic 1 of the exam guide: • 1.2 — Apply MITRE ATT&CK tactics and techniques within Falcon to provide context to a detection • Deep dive into MITRE ATT&CK tactics and techniques and how they map inside the CrowdStrike Falcon console Stay Connected & Keep Learning! 🔔 Subscribe and hit the bell icon to follow the entire CCFR training series. 👍 Like & share this video if you find it useful. 💬 Drop your questions in the comments - I'll personally respond and guide you. #crowdstrike #CCFR #CrowdStrikeTraining #FalconResponder #incidentresponse #MITREATTACK #threatdetection #socanalyst #cybersecuritytraining #cybersecuritycareers #securityoperations #FalconPlatform #blueteam #edr #endpointsecurity