Developing Phantom 4.10 Playbooks

Developing Phantom 4.10 Playbooks

Developing Phantom 4.10 Playbooks

Upcoming Classes

Online

Instructor-led online training

Location Aug 2021 Sep 2021 Oct 2021 Nov 2021 Dec 2021 Jan 2022 Feb 2022
EMEA UK Time - Virtual Aug 5 – Aug 6
Aug 19 – Aug 20
 Sep 9 – Sep 10
Sep 23 – Sep 24
 Oct 7 – Oct 8
Oct 28 – Oct 29
 Nov 17 – Nov 18
 Dec 6 – Dec 7
 Jan 5 – Jan 6
Jan 19 – Jan 20
APAC Singapore - Virtual Aug 11 – Aug 12
 Oct 13 – Oct 14
 Nov 24 – Nov 25
 Jan 10 – Jan 11
AMER Pacific Time - Virtual Aug 11 – Aug 12
Aug 25 – Aug 26
 Sep 9 – Sep 10
Sep 22 – Sep 23
 Oct 6 – Oct 7
 Nov 17 – Nov 18
 Dec 15 – Dec 16
 Jan 19 – Jan 20
AMER Eastern Time - Virtual Aug 18 – Aug 19
 Sep 1 – Sep 2
Sep 15 – Sep 16
Sep 29 – Sep 30
 Oct 13 – Oct 14
Oct 27 – Oct 28
 Nov 11 – Nov 12
 Dec 1 – Dec 2
Dec 8 – Dec 9
Dec 13 – Dec 14
 Jan 5 – Jan 6
Jan 26 – Jan 27

Summary

This 9 hour course prepares IT and security practitioners to plan, design, create and debug playbooks for Phantom.

Description

  • Automation best practices
  • The visual playbook editor
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using the vault in a playbook
  • Custom lists

 

 

 

Duration

2 Days

Objectives

Module 1 – Introduction to Playbooks

  • Understand automation best practices
  • Design playbooks
  • Python support
  • Use the playbook manager

Module 2 – Visual Playbook Editor

  • Use the visual playbook editor
  • Use actions and decisions
  • Process action results
  • Test new playbooks

Module 3 – User Interaction and Logic

  • Interact with users during playbook execution
  • Format outputs
  • Use decision blocks

Module 4 – Accessing and Formatting Data

  • Accessing action results
  • Accessing artifact and container data
  • Formatting data

Module 5 – Modular Playbook Development

  • Calling other playbooks
  • Creating artifacts
  • Sending email
  • Passing data between playbooks

Module 6 – Custom Lists and Filters

  • Custom list concepts
  • Create custom lists
  • Access lists from playbooks
  • Use filters

 

Prerequisites

Classes:

Introduction to Phantom

Skills:

Experience with Python Programming

 

Onsite Training

For groups of three or more

Request Quote

Public Training

EMEA UK Time - Virtual

APAC Singapore - Virtual

AMER Pacific Time - Virtual

AMER Eastern Time - Virtual


Don't see a date that works for you?

Request Class

© 2005- Splunk Inc. All rights reserved.
Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © Splunk Inc. All rights reserved.