This course is designed for novice learners wanting to understand the basics of how security, orchestration, automation, and response (SOAR) are used for enterprise security. Learners will gain insight on how institutions monitor and respond to security threats.
To allow for a self-paced learning experience, this course is video-free. Assignments contain short explanations with images. You'll benefit from instant feedback from a variety of assessment items along the way, gently progressing from quick understanding checks (multiple choice, fill in the blank, and un-scrambling blocks of text) to small, approachable summative assessments that take minutes instead of hours.
Overview
Syllabus
- Security Operations Center (SOC)
- Welcome to Week 1 of the SOAR for Enterprise Security course. These assignments cover the concepts of the personnel and skills of those who provide SOAR, the importance of logging and monitoring events, and the difference between SIEM and SOAR. The module ends with graded summative assessments.
- Main Elements of SOAR
- Welcome to Week 2 of the SOAR for Enterprise Security course. These assignments cover the concepts of security orchestration, security automation, and incident response. The module ends with graded summative assessments.
- SOAR's Role in a SOC
- Welcome to Week 3 of the SOAR for Enterprise Security course. These assignments cover the concepts of the SOAR event life cycle, the benefits of SOAR, and the drawbacks of SOAR. The module ends with graded summative assessments.
Taught by
Patrick Ester and Shanace Robinson
