EtusivuHae koulutuksiaAdministering Splunk SOAR

Administering Splunk SOAR

This 3 hour course prepares IT professionals to configure and manage SOAR.


Koulutusmuoto

Remote


Kesto

1 tunti


Hinta

500 €

  • SOAR concepts
  • Initial configuration
  • Apps and assets
  • Configuring automation
  • User management
  • Ingesting Data
  • Customization and monitoring

Classes:

  • Investigating Incidents with Splunk SOAR

Topic 1 -Initial Configuration

  • Describe SOAR operating concepts
  • Identify documentation and community resources
  • SOAR and Splunk Architecture
  • Product settings
  • Access control
  • Authentication settings
  • Response settings
  • Understanding roles
  • Creating users
  • Managing user access

Topic 2 - Apps, Assets and Playbooks

  • Add and configure apps and assets
  • Manage playbooks
  • Ingesting Data
  • Labels and tags
  • Event settings
  • Topic 3 - Customization and Monitoring

    • Create custom severity levels
    • Create custom status levels
    • Add custom fields and CEF settings
    • Create custom workbooks
    • Run reports
    • Use SOAR audit tools
    • Monitor system health
    • Yhteistyössä: Arrow