QRadar SOAR: Foundations

Getting started

• Describe architectural patterns
• Install the product and configure license and access
• Review the SOAR Console
• Manage cases and use Breach Response add-on
• Utilize the concept of artifacts

Case management and email integration

• Utilize case management capabilities
• Integrate email system for users and case management
• Focus on the Breach Response module                                            

Playbooks and integrations

• Gain hands-on experience with the SOAR platform
• Design playbooks
• Integrate IBM and third-party solutions with SOAR                                   

Security operations center (SOC) Administrator

SOC Analyst

Security Analyst

Incident Responder

Managed Service Security Provider (MSSP)

In this course, you learn about the following topics:

- QRadar SOAR architectural patterns

- Install the product, and configure license and access

- Review the SOAR Console

- Manage cases

- Utilize the concept of artifacts

- Utilize case management capabilities

- Integrate email system for users and case management

- Focus on the Breach Response module

- Gain hands-on experience with the SOAR platform

- Design playbooks

- Integrate IBM and third-party solutions with SOAR