Administering Splunk SOAR
CODE: SPL_ASS
LÄNGE: 4 Hours (0,5 Tage)
PREIS: €500,00
Beschreibung
This 3 hour course prepares IT professionals to configure and manage SOAR.
Lernziel
- SOAR concepts
- Initial configuration
- Apps and assets
- Configuring automation
- User management
- Ingesting Data
- Customization and monitoring
Voraussetzungen
Classes:
- Investigating Incidents with Splunk SOAR
Inhalt
Topic 1 –Initial Configuration
- Describe SOAR operating concepts
- Identify documentation and community resources
- SOAR & Splunk Architecture
- Product settings
- Access control
- Authentication settings
- Response settings
- Understanding roles
- Creating users
- Managing user access
Topic 2 – Apps, Assets and Playbooks
Topic 3 – Customization and Monitoring