QRadar SOAR: Foundations

• Security operations center (SOC) Administrator
• SOC Analyst
• Security Analyst
• Incident Responder
• Managed Service Security Provider (MSSP)

In this course, you learn about the following topics:

• QRadar SOAR architectural patterns
• Install the product, and configure license and access
• Review the SOAR Console
• Manage cases
• Utilize the concept of artifacts
• Utilize case management capabilities
• Integrate email system for users and case management
• Focus on the Breach Response module
• Gain hands-on experience with the SOAR platform
• Design playbooks
• Integrate IBM and third-party solutions with SOAR

• null

Getting started

• Describe architectural patterns
• Install the product and configure license and access
• Review the SOAR Console
• Manage cases and use Breach Response add-on
• Utilize the concept of artifacts

 Case management and email integration

• Utilize case management capabilities
• Integrate email system for users and case management
• Focus on the Breach Response module                                             

Playbooks and integrations

• Gain hands-on experience with the SOAR platform
• Design playbooks
• Integrate IBM and third-party solutions with SOAR