Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
SOAR Fundamentals by Siemplify
Rating: 4.5 out of 5(287 ratings)
2,089 students
Created byOleg Siminel
Last updated 11/2020
English

What you'll learn

  • Security Orchestration Automation and Response
  • Siemplify SOAR Platform

Course content

1 section9 lectures2h 54m total length
  • Introduction and High Level Architecture8:06

    Welcome to the course! We’ll get started by providing an overview of important Siemplify terms and their definitions as well as an outline of the Siemplify high level architecture, deployment methods, and hardware requirements.

  • Platform Overview22:26

    Get to know the Siemplify platform better in chapter two as we provide greater visibility from a user’s perspective. Learn the functionality of each tab as we visit the homepage and dashboards, cases and playbooks, searching, reports, IDE, the marketplace, Siemplify documentation, and the profile tab.

  • Case Management26:29

    This chapter covers the Siemplify cases tab. All alerts are sent to this tab, making it one of the most used tabs in our profile. We will discuss in detail the various components which allow you to effectively manage cases within Siemplify. Become familiar with case queue, case top bar, context details of a case, case alert entities, investigator, case wall and the events tab.

  • User and Environment Management10:12

    Delve deeper into user environment management to find out how Siemplify is customizable for multiple users and groups. Learn more about adaptive user management, the three unique permission groups, and how to create new environments.

  • Integrations, Connectors and Ontology26:43

    Learn more about Siemplify’s integration approach, connectors, and ontology to dig deeper into platform functionality and configurations. Specific topics in this chapter include how a connector works, connector configuration, why ontology is crucial, visualization, mapping, modeling, and more.

  • Playbooks31:33

    This chapter focuses on the functionality and navigation within Siemplify playbooks. Become more confident in building Siemplify playbooks and leveraging automation to gather information on alerts. Learn more about key playbook mechanisms and the workflow of actions that follow a playbook trigger.

  • Siemplify Settings22:07

    Become more familiar with Siemplify settings as we take a closer look at each setting available for customization. Learn how to uniquely tailor your Siemplify experience, from organization and case data to advanced settings, data configuration, ontology, and environments.

  • Dashboards12:00

    Learn more about Siemplify dashboards in this chapter as we provide step-by-step processes for creating and customizing dashboards and widgets. You will also discover additional dashboard capabilities, including sharing dashboards, dashboard configuration options, and more.

  • Reports15:08

    Training in this chapter focuses on the Siemplify reports module. Become more comfortable with creating reports, utilizing report widgets, scheduling, and additional report capabilities. Find out how generated reports can provide valuable data and insights at a glance.

Requirements

  • General understanding of Security Operations Center

Description

Welcome to the SOAR Fundamentals brought to you by Siemplify

This course has been developed to help you understand Security Orchestration, Automation and Response (SOAR) in more detail. The implementation is presented using Siemplify SOAR Platform. We recommend downloading your FREE Community Edition of Siemplify through:   community . siemplify . co    to follow the content of this course in a more engaging format.

SOAR is a fairly new space for many security professionals and companies of different sizes. In this training, we are going to cover the main modules that Siemplify SOAR solution offers as well as talk about best practices. This is the very first training in the SOAR learning series that Siemplify prepared for you.

Additionally, our School of SOC sessions offer you an opportunity to dive deeper into the world of SOC (and SOAR) with one of our instructors in a virtual, free of charge, class that you won’t want to miss! Check it out on our website.

Who this course is for:

  • Security Operations Analysts, Engineers, Architects, Management