Unit 1: Understanding SOAR Fundamentals
Unit 2: Exploring the SOAR Landscape
XSOAR for SOC Analysts: Zero to Proficiency
A comprehensive course designed to equip SOC analysts with the skills to effectively use XSOAR for incident response, automation, and threat management.
Unit 1: XSOAR Architecture and Terminology
Unit 2: Integrations, Layouts, War Rooms, Roles
Unit 1: Exploring the XSOAR Interface
Unit 2: Customization and Search
Unit 1: Incident Lifecycle and Ingestion
Unit 2: Prioritization and Documentation
Unit 1: Understanding and Ingesting Indicators
Unit 2: Using Indicators for Threat Detection
Unit 1: Understanding Playbooks
Unit 2: Exploring the Playbook Editor
Unit 1: Building Blocks of a Playbook
Unit 2: Adding Logic and Testing
Unit 1: Mastering Core Playbook Tasks
Unit 2: Advanced Task Configuration
Unit 1: Understanding XSOAR Integrations
Unit 2: Configuring and Managing Integrations
Unit 1: SIEM and EDR Integrations
Unit 2: Threat Intel Integrations
Unit 1: Mastering Sub-Playbooks and Loops
Unit 2: Advanced Looping and Optimization
Unit 1: Understanding and Using War Rooms
Unit 2: Collaboration and Documentation
Unit 1: Creating and Customizing Reports
Unit 2: Creating and Customizing Dashboards
Unit 1: Layout Basics and Custom Fields
Unit 2: Conditional Formatting and Advanced Techniques
Unit 1: Exploring and Utilizing the XSOAR Marketplace
Unit 2: Evaluating and Contributing to the Marketplace
Unit 1: User Account Management in XSOAR
Unit 2: Roles, Permissions, and Security
Unit 1: Diagnosing and Resolving Common XSOAR Issues
Unit 2: Maintenance, Updates, and Community Resources
Unit 1: Strategic Implementation and Standardization
Unit 2: Documentation, Review, and Updates
Unit 1: Proactive Threat Hunting with XSOAR
Unit 2: Automating Threat Hunting
Unit 1: Understanding and Using the XSOAR API
Unit 2: Developing Custom Integrations