Projects
Assignments
Overview
Cortex XSOAR: Automation and Orchestration – This four-day, instructor-led course is designed to empower SOC, CERT, CSIRT, and SOAR engineers with the skills to utilize Cortex XSOAR’s integrations, playbooks, incident layouts, and other essential system features. Through hands-on training, participants will learn to facilitate orchestration, process automation, case management, and streamline analyst workflows using Cortex XSOAR.
Objectives
By the end of this course, leaner will be able to:
- Implement Cortex XSOAR integrations to streamline security operations.
- Design and customize playbooks to automate repetitive workflows.
- Create incident-page layouts and configure features for enhanced case management.
- Develop and deploy a comprehensive playbook for phishing incident response.
- Understand best practices for managing analyst workflows with Cortex XSOAR.
Prerequisites
- Basic knowledge of Security Operations Center (SOC) processes.
- Familiarity with incident response and case management.
- Experience with automation or scripting (Python is advantageous).
- Knowledge of phishing and related threat vectors.
- Basic understanding of SOAR and its applications in security operations.
Course Outline
Module 1 : Introduction to Cortex XSOARCourses2024-11-09T07:08:25+05:30
- Overview of Cortex XSOAR’s architecture and primary functionalities in security orchestration.
Module 2 : Integrations and ConfigurationCourses2024-11-09T07:09:23+05:30
- Step-by-step guide to setting up integrations for resource orchestration across various security tools.
Module 3 : Playbook Development for Workflow AutomationCourses2024-11-09T07:10:11+05:30
- Hands-on creation and deployment of playbooks to automate standard SOC workflows, focusing on phishing.
Module 4 : Incident-Page Layouts and CustomizationsCourses2024-11-09T07:11:04+05:30
- Configuring incident-page layouts to facilitate efficient case management and improve response times.
Module 5 : Advanced Case Management and Workflow OptimizationCourses2024-11-09T07:11:55+05:30
- Best practices for using Cortex XSOAR’s automation and orchestration features to streamline analyst workflows.
