HemSök efter kurserDeveloping SOAR Playbooks

Developing SOAR Playbooks

This 9 hour introductory course prepares IT and security practitioners to plan, design, create and debug basic playbooks for SOAR. Students will learn fundamentals of SOAR playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced SOAR Implementation course.

Utbildningsformer
Remote

Längd
2 timmar

Pris
10150 kr

  • Automation best practices
  • The visual playbook editor
  • Creating automation and input playbooks
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using files in a playbook
  • Custom lists
  • Data filtering

To be successful, students should have a solid understanding of the following:

  • Familiarity with Python Programming

One of the Following:

  • Administering SOAR (preferred)
  • Using SOAR Video Courses
  • Module 1 - Introduction to Playbooks

    • Understand automation best practices
    • Design playbooks
    • Python support
    • Use the playbook manager

    Module 2 - Visual Playbook Editor

    • Use the visual playbook editor
    • Use actions and decisions
    • Process action results
    • Test new playbooks
    • Module 3 - User Interaction and Logic

      • Interact with users during playbook execution
      • Format outputs
      • Use decision blocks
      • Module 4 - Accessing and Formatting Data

        • Accessing action results
        • Accessing artifact and container data
        • Formatting data
        • Module 5 - Modular Playbook Development

          • Creating inpup playbooks
          • Calling other playbooks
          • Passing data between playbooks
          • Module 6 - Custom Lists and Filters

            • Custom list concepts
            • Create custom lists
            • Access lists from playbooks
            • Use filters
            • Utbildningen levereras i samarbete med: Arrow