QRadar SOAR: Foundations

Course code

BQ405GUA

Duration

2 Days, 16 Acad. Hours

Download pdf

Course Overview

Objectives

Prerequisites

Course Outline

Course Overview

In this course, you learn about the IBM Security® QRadar® SOAR architecture, and how to position the product in your company’s security architecture design. You gain hands-on experience with the SOAR interface, by investigating and managing cases and users with the SOAR Breach Response module, playbooks, and email integration.

Objectives

In this course, you learn about the following topics:

– QRadar SOAR architectural patterns

– Install the product, and configure license and access

– Review the SOAR Console

– Manage cases

– Utilize the concept of artifacts

– Utilize case management capabilities

– Integrate email system for users and case management

– Focus on the Breach Response module

– Gain hands-on experience with the SOAR platform

– Design playbooks

– Integrate IBM and third-party solutions with SOAR

Prerequisites

Audience

Security operations center (SOC) Administrator

SOC Analyst

Security Analyst

Incident Responder

Managed Service Security Provider (MSSP)

Course Outline

Topics

Getting started

Describe architectural patterns
Install the product and configure license and access
Review the SOAR Console
Manage cases and use Breach Response add-on
Utilize the concept of artifacts

Case management and email integration

Utilize case management capabilities
Integrate email system for users and case management
Focus on the Breach Response module

Playbooks and integrations

Gain hands-on experience with the SOAR platform
Design playbooks
Integrate IBM and third-party solutions with SOAR

Back to trainings (Security)

Request the training

QRadar SOAR: Foundations

Course code:

BQ405GUA

Duration:

2 Days, 16 Acad. Hours

21.04.25

Kyiv

Delivery format

Dates

21.04.25

Location

Kyiv

Apply

Download pdf