Developing SOAR Playbooks

Developing SOAR Playbooks

Developing SOAR Playbooks

Upcoming Classes

Online

Instructor-led online training

Location Mar 2023 Apr 2023 May 2023 Jun 2023 Jul 2023 Aug 2023 Sep 2023
APAC Singapore - Virtual Apr 3 – Apr 4
Apr 24 – Apr 25
 May 29 – May 30
 Jun 26 – Jun 27
 Jul 24 – Jul 25
 Aug 24 – Aug 25
 Sep 18 – Sep 19
AMER Eastern Time - Virtual Apr 13 – Apr 14
Apr 24 – Apr 25
AMER Pacific Time - Virtual Apr 17 – Apr 18
EMEA UK Time - Virtual Apr 24 – Apr 25
 May 11 – May 12
May 25 – May 26
 Jun 19 – Jun 20
Jun 26 – Jun 27
 Jul 10 – Jul 11
Jul 24 – Jul 25
 Aug 10 – Aug 11
Aug 24 – Aug 25
 Sep 4 – Sep 5
Sep 18 – Sep 19

Summary

This 9 hour introductory course prepares IT and security practitioners to plan, design, create and debug basic playbooks for SOAR. Students will learn fundamentals of SOAR playbook capabilities, creation and testing. This course is a pre-requisite for the Advanced SOAR Implementation course.

Description

  • Automation best practices
  • The visual playbook editor
  • Creating automation and input playbooks
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using files in a playbook
  • Custom lists
  • Data filtering

 

 

 

Duration

2 Days

Objectives

Module 1 – Introduction to Playbooks

  • Understand automation best practices
  • Design playbooks
  • Python support
  • Use the playbook manager

Module 2 – Visual Playbook Editor

  • Use the visual playbook editor
  • Use actions and decisions
  • Process action results
  • Test new playbooks

Module 3 – User Interaction and Logic

  • Interact with users during playbook execution
  • Format outputs
  • Use decision blocks

Module 4 – Accessing and Formatting Data

  • Accessing action results
  • Accessing artifact and container data
  • Formatting data

Module 5 – Modular Playbook Development

  • Creating input playbooks
  • Calling other playbooks
  • Passing data between playbooks

Module 6 – Custom Lists and Filters

  • Custom list concepts
  • Create custom lists
  • Access lists from playbooks
  • Use filters

 

Prerequisites

To be successful, students should have a solid understanding of the following:
  • One of the Following:
  • Administering SOAR (preferred)
  • Using SOAR Video Courses

Onsite Training

For groups of three or more

Request Quote

Public Training

APAC Singapore - Virtual

AMER Eastern Time - Virtual

AMER Pacific Time - Virtual

EMEA UK Time - Virtual


Don't see a date that works for you?

Request Class

Sitemap
Privacy
Website Terms of Use
Splunk Licensing Terms
Export Control
Modern Slavery Statement
Splunk Patents

© 2005- Splunk Inc. All rights reserved.

Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.