FrontpageSearch trainings & eventsAdministering Splunk SOAR

Administering Splunk SOAR

This 3 hour course prepares IT professionals to configure and manage SOAR.


Osallistumismuoto

Remote


Duration

4 hours


Price

500 €

  • SOAR concepts

  • Initial configuration

  • Apps and assets

  • Configuring automation

  • User management

  • Ingesting Data

  • Customization and monitoring

Classes:

  • Investigating Incidents with Splunk SOAR

Topic 1 -Initial Configuration

  • Describe SOAR operating concepts

  • Identify documentation and community resources

  • SOAR and Splunk Architecture

  • Product settings

  • Access control

  • Authentication settings

  • Response settings

  • Understanding roles

  • Creating users

  • Managing user access

Topic 2 - Apps, Assets and Playbooks

  • Add and configure apps and assets

  • Manage playbooks

  • Ingesting Data

  • Labels and tags

  • Event settings

    • Topic 3 - Customization and Monitoring

    • Create custom severity levels

    • Create custom status levels

    • Add custom fields and CEF settings

    • Create custom workbooks

    • Run reports

    • Use SOAR audit tools

    • Monitor system health

      • Price 500 € +vat

      Events


      + Näytä lisää toteutuksia


      In cooperation with: Arrow