Introduction to Security Orchestration, Automation and Response (SOAR)
55mIntermediate2023-08-23
Authors

Bryan Li
Founder of Cyber Tech & Risk, Chief Catalyst at Enlighteni
Course details
SOAR (Security Orchestration, Automation, and Response) is a set of tools and services that automates the process of cyberattack handling. It helps security operation teams to boost productivity, reduce costs, and improve incident response. In this course, Bryan Li, founder of Cyber Tech & Risk, delves into this important topic. Find out what SOAR is, why it’s important, and what key capabilities it provides. Explore ways that SOAR works in security operations and with other security solutions. Learn how to orchestrate internal and external tools using a SOAR solution, such as Microsoft Sentinel. Go over automating incident triage and response, as well as security tasks, using a SOAR solution. Plus, learn to implement SOAR effectively. This course will help you learn the essential concepts and functions of SOAR and discover how SOAR can modernize your security operations.
Skills covered
Introduction toIncident ResponseAzureCybersecurityMicrosoft
Concepts
0. Introduction
- 01 - Discovering SOAR
- 02 - What you should know
1. SOAR Fundamentals
- 03 - Modernize security operations
- 04 - What is SOAR
- 05 - Apply SOAR in SOC
- 06 - Automation options in SOAR
- 07 - SOAR solutions
2. SOAR in Action
- 08 - Reduce false positives
- 09 - Enrich incident data
- 10 - Create a playbook
- 11 - Accelerate incident triage
- 12 - Leverage playbook templates
3. SOAR Strategy
- 13 - SOAR vs. SIEM vs. XDR
- 14 - Implement SOAR effectively
Conclusion
- 15 - Level up with SOAR