Quest InTrust Training

Quest InTrust collects, compresses, and retains security event data from Active Directory, Windows, Unix, Linux, and Microsoft 365 sources, then makes that data searchable for the people who answer audit questions and investigate incidents. If your SOC, internal audit team, or compliance group is the reason InTrust is in the environment, this is the training that turns the product documentation into operational fluency.

Two courses are offered. Both are available as live instructor-led training (ILT) or as self-paced student-led training (SLT) through the virtual training center.

InTrust 3-Day (Admin Only)

Three-day hands-on course for the administrators who install, configure, and run InTrust day to day. The right starting point for an operations team taking ownership of a new InTrust deployment, or for new staff joining a team that already runs it.

• Duration: 3 days instructor-led, or self-paced equivalent
• Audience: IT operations and security engineers responsible for InTrust deployment and ongoing administration
• You will learn to: understand InTrust architecture, install the product, configure data collection from supported source systems, and run the day-to-day administration tasks that keep collection healthy
• Tuition: $3,492 per student

Register for InTrust 3-Day (Admin Only) on qsftraining.com →

InTrust 5-Day Comprehensive

Five-day course that covers everything in the 3-day class and adds the depth a team needs to use InTrust as a working investigation and reporting tool, not just a collector. The right choice for analysts and engineers who are going to live in the product, build saved searches and reports, and answer audit questions out of it.

• Duration: 5 days instructor-led, or self-paced equivalent
• Audience: SOC analysts, audit and compliance engineers, and IT operations staff who use InTrust as a primary investigation and reporting tool
• You will learn to: install and configure InTrust end to end, integrate it with the full set of supported source systems, build searches and reports against retained event data, and operate the product through hands-on lab work in the virtual training center
• Tuition: $6,750 per student

Register for InTrust 5-Day Comprehensive on qsftraining.com →

Which course is right for your team?

The 3-day class is enough if the people in the room are standing the product up and keeping it running, and a different team consumes the data. The 5-day class is the right call when the same people who run InTrust also have to answer the auditor, build the report, or pull the evidence for an incident. Most teams who own both sides of that workflow take the 5-day.

Need help running InTrust, not just learning it?

LeadThem operates InTrust as part of ongoing managed IT for clients who do not want to staff the product internally. All of our resources are Quest Certified. See our outsourced IT management services or contact us to scope the engagement.

Why train with the LeadThem network

• Quest Software partner since 2005. LeadThem-affiliated training has run alongside the Quest product line since the early Migration Manager days.
• Hands-on, not theoretical. Every ILT and SLT class includes lab time in a working virtual training environment.
• Trained by people who run the product in production. Instructors are practicing consultants who deliver InTrust deployments for real clients.
• Direct line to deployment help. Students who finish a class and decide they want LeadThem to run the actual deployment can reach the engagement team directly.