(EDU-380) Cortex XSOAR:Automation and Orchestration Course Overview:

In this course, participants will gain expertise in configuring integrations, creating tasks, and developing playbooks. They will learn how to build incident layouts to streamline incident triage and investigation, effectively categorize event information, map it to display fields, and develop automations. Additionally, participants will manage content, indicator data, and artifact stores, schedule jobs, organize users and roles, oversee case management, and foster collaboration, making it an essential training for security analysts, engineers, and professionals responsible for incident response and management.

Intended Audience:

• Security-operations (SecOps)
• Security, orchestration, automation, and response (SOAR) engineers
• Managed security service providers (MSSPs)
• Service delivery partners
• System integrators
• Professional services engineers

Learning Objectives of (EDU-380) Cortex XSOAR:Automation and Orchestration:

This training is designed to enable a SOC, CERT, CSIRT, or SOAR engineer to start working with Cortex XSOAR integrations, playbooks, incident-page layouts, and other system features to facilitate resource orchestration, process automation, case management, and analyst workflow.

The course includes coverage of a complete playbook-development process for automating a typical analyst workflow to address phishing incidents. This end-to-end view of the development process provides a framework for more focused discussions of individual topics that are covered in the course.