Developing Phantom 4.10 Playbooks

Developing Phantom 4.10 Playbooks

Developing Phantom 4.10 Playbooks

Upcoming Classes

Online

Instructor-led online training

Location May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021 Oct 2021 Nov 2021
AMER Eastern Time - Virtual May 19 – May 20
 Jun 9 – Jun 10
Jun 23 – Jun 24
Jun 30 – Jul 1
 Jul 14 – Jul 15
Jul 28 – Jul 29
 Aug 4 – Aug 5
Aug 18 – Aug 19
 Sep 1 – Sep 2
Sep 15 – Sep 16
Sep 29 – Sep 30
 Oct 13 – Oct 14
Oct 27 – Oct 28
EMEA UK Time - Virtual May 20 – May 21
 Jun 3 – Jun 4
Jun 16 – Jun 17
 Jul 8 – Jul 9
Jul 22 – Jul 23
 Aug 5 – Aug 6
Aug 19 – Aug 20
 Sep 9 – Sep 10
Sep 23 – Sep 24
 Oct 7 – Oct 8
Oct 28 – Oct 29
AMER Pacific Time - Virtual May 26 – May 27
 Jun 3 – Jun 4
Jun 16 – Jun 17
 Jul 14 – Jul 15
Jul 21 – Jul 22
 Aug 11 – Aug 12
Aug 25 – Aug 26
 Sep 9 – Sep 10
Sep 22 – Sep 23
 Oct 6 – Oct 7
APAC Singapore - Virtual Jul 8 – Jul 9
 Aug 11 – Aug 12
 Oct 13 – Oct 14

Summary

This 9 hour course prepares IT and security practitioners to plan, design, create and debug playbooks for Phantom.

Description

  • Automation best practices
  • The visual playbook editor
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using the vault in a playbook
  • Custom lists

 

 

 

Duration

2 Days

Objectives

Module 1 – Introduction to Playbooks

  • Understand automation best practices
  • Design playbooks
  • Python support
  • Use the playbook manager

Module 2 – Visual Playbook Editor

  • Use the visual playbook editor
  • Use actions and decisions
  • Process action results
  • Test new playbooks

Module 3 – User Interaction and Logic

  • Interact with users during playbook execution
  • Format outputs
  • Use decision blocks

Module 4 – Accessing and Formatting Data

  • Accessing action results
  • Accessing artifact and container data
  • Formatting data

Module 5 – Modular Playbook Development

  • Calling other playbooks
  • Creating artifacts
  • Sending email
  • Passing data between playbooks

Module 6 – Custom Lists and Filters

  • Custom list concepts
  • Create custom lists
  • Access lists from playbooks
  • Use filters

 

Prerequisites

Classes:

Introduction to Phantom

Skills:

Experience with Python Programming

 

Onsite Training

For groups of three or more

Request Quote

Public Training

AMER Eastern Time - Virtual

EMEA UK Time - Virtual

AMER Pacific Time - Virtual

APAC Singapore - Virtual


Don't see a date that works for you?

Request Class

© 2005- Splunk Inc. All rights reserved.
Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. © Splunk Inc. All rights reserved.