Investigating Incidents with Splunk SOAR
CODE: SPL_IIWSS
LÄNGE: 0,96 Hours (0,12 Tage)
PREIS: €500,00
Beschreibung
This 3 hour course prepares security practitioners to use SOAR to respond to security incidents, investigate vulnerabilities, and take action to mitigate and prevent security problems.
Lernziel
- SOAR concepts
- Investigations
- Running actions and playbooks
- Case management & workflows
Inhalt
Topic 1 – Starting Investigations
- SOAR investigation concepts
- ROI view
- Using the Analyst Queue
- Using indicators
- Using search
Topic 2 – Working on Events
Topic 3 – Cases: Complex Events