Developing Phantom 4.10 Playbooks

Developing Phantom 4.10 Playbooks

Developing Phantom 4.10 Playbooks

Upcoming Classes

Online

Instructor-led online training

Location Oct 2021 Nov 2021 Dec 2021 Jan 2022 Feb 2022 Mar 2022 Apr 2022
EMEA UK Time - Virtual Oct 28 – Oct 29
 Nov 17 – Nov 18
 Dec 6 – Dec 7
 Jan 5 – Jan 6
Jan 19 – Jan 20
AMER Eastern Time - Virtual Nov 11 – Nov 12
 Dec 1 – Dec 2
Dec 8 – Dec 9
Dec 13 – Dec 14
 Jan 5 – Jan 6
Jan 26 – Jan 27
AMER Pacific Time - Virtual Nov 17 – Nov 18
 Dec 15 – Dec 16
 Jan 19 – Jan 20
APAC Singapore - Virtual Nov 24 – Nov 25
 Jan 12 – Jan 13

Summary

This 9 hour course prepares IT and security practitioners to plan, design, create and debug playbooks for Phantom.

Description

  • Automation best practices
  • The visual playbook editor
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using the vault in a playbook
  • Custom lists

 

 

 

Duration

2 Days

Objectives

Module 1 – Introduction to Playbooks

  • Understand automation best practices
  • Design playbooks
  • Python support
  • Use the playbook manager

Module 2 – Visual Playbook Editor

  • Use the visual playbook editor
  • Use actions and decisions
  • Process action results
  • Test new playbooks

Module 3 – User Interaction and Logic

  • Interact with users during playbook execution
  • Format outputs
  • Use decision blocks

Module 4 – Accessing and Formatting Data

  • Accessing action results
  • Accessing artifact and container data
  • Formatting data

Module 5 – Modular Playbook Development

  • Calling other playbooks
  • Creating artifacts
  • Sending email
  • Passing data between playbooks

Module 6 – Custom Lists and Filters

  • Custom list concepts
  • Create custom lists
  • Access lists from playbooks
  • Use filters

 

Prerequisites

Classes:

Introduction to Phantom

Skills:

Experience with Python Programming

 

Onsite Training

For groups of three or more

Request Quote

Public Training

EMEA UK Time - Virtual

AMER Eastern Time - Virtual

AMER Pacific Time - Virtual

APAC Singapore - Virtual


Don't see a date that works for you?

Request Class

© 2005- Splunk Inc. All rights reserved.
Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © Splunk Inc. All rights reserved.