Varonis
Varonis is a data-centric security platform that helps organizations discover, protect, and monitor sensitive data across file systems, email, and cloud collaboration platforms.
- Protects sensitive data: files, emails, SharePoint, OneDrive, Google Drive, and more.
- Monitors access behavior: who accessed what, when, and how.
- Detects threats: insider risks, compromised accounts, ransomware.
- Supports compliance: reporting and controls for GDPR, HIPAA, SOX, etc.
Before diving into training, understand these core concepts:
- Data discovery & classification: locate PII, PCI, PHI, IP.
- Permissions & access control: visualize and reduce excessive access; enforce least privilege.
- Threat detection & response: behavior analytics, alerting, and guided investigation.
- Audit & compliance: detailed activity auditing and evidence-ready reporting.
- Automation & remediation: policy-driven fixes to remove stale/overexposed access.
- Cloud security: coverage for Microsoft 365, Google Workspace, and SaaS data.
You’ll benefit if you have basic knowledge in:
- IT basics: Windows/Unix file systems, networking fundamentals.
- Identity: Active Directory / Azure AD concepts, groups, permissions.
- Security fundamentals: authentication, authorization, IAM, least privilege.
- Cloud collaboration: Microsoft 365 and Google Workspace basics.
- Helpful skills: PowerShell, log analysis, basic compliance awareness.
1: Foundations & Platform Overview
- Varonis architecture, components, and data sources
- Deployment models and data collection (on-prem & cloud)
- UI tour: dashboards, widgets, and navigation
2: Data Discovery & Classification
- Scanning repositories and content classification
- Sensitive data policies and tuning
- Interpreting discovery results and prioritizing risk
3: Permissions, Exposure & Least Privilege
- Effective permissions, group nesting, and global access
- Identifying toxic combinations and overexposure
- Remediation planning and change simulation
4: Threat Detection & Incident Response
- Behavior analytics and alert rules
- Ransomware and insider threat playbooks
- Investigations, timelines, and response workflows
5: Automation & Policy Enforcement
- Automated entitlement cleanup
- Approval workflows and exceptions
- Risk reduction KPIs and continuous hygiene
6: Cloud & SaaS Security
- Microsoft 365: SharePoint, OneDrive, Teams, Exchange
- Google Drive and third-party SaaS integrations
- Cloud entitlements and external sharing governance
7: Reporting, Audit & Compliance
- Prebuilt and custom reports
- Audit trails and evidence collection
- Compliance mappings (GDPR, HIPAA, SOX)
Disclaimer: All technology names, certification titles, and brand logos used are the property of their respective trademark holders and are utilized solely for identification purposes.