This 9 hour (2 days a 4,5 hours) introductory course prepares IT and security practitioners to plan, design, create and debug basic playbooks for SOAR. Students will learn fundamentals of SOAR playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced SOAR Implementation course.

• Automation best practices
  
• The visual playbook editor
  
• Creating automation and input playbooks
  
• Using actions and decisions
  
• Using action results
  
• Testing and debugging playbooks
  
• User interaction
  
• Output formatting
  
• Complex logic
  
• Interacting with artifacts
  
• Using files in a playbook
  
• Custom lists
  
• Data filtering

To be successful, students should have a solid understanding of the following:

• Familiarity with Python Programming

One of the Following:

Module 1 – Introduction to Playbooks

• Understand automation best practices
• Design playbooks
• Python support
• Use the playbook manager

Module 2 – Visual Playbook Editor

Module 3 – User Interaction and Logic

Module 4 – Accessing and Formatting Data

Module 5 – Modular Playbook Development

Module 6 – Custom Lists and Filters