QRadar SOAR: Integrating with SIEM

Overview

In this couse, you learn about the IBM Security® QRadar® SIEM and QRadar SOAR apps that automate data exchange and improve the security incident investigation. You gain knowledge on how to integrate QRadar SOAR and SIEM. You improve incident response by using the SOAR Plug-in App on SIEM and analyzing SIEM's offense in SOAR's QRadar Offense Details tab. You build a playbook and run a query by configuring the QRadar Integration app in a set of useful functions. 

Audience

Security Operations Center (SOC) AdministratorSOC AnalystSecurity AnalystIncident ResponderManaged Service Security Provider (MSSP) 

Prerequisites

Objective

In this course, you learn the following skills:

• Improve response by analyzing QRadar SIEM Offense details
• Configure QRadar Integration Apps from X-Force Exchange
• Build a table and run a query
• Develop a playbook

Course Outline

QRadar SOAR Integrating with SIEM

• Installation of SIEM and SOAR apps from the X-Force Exchange
• Configuring access to SOAR server on QRadar SIEM
• Analyzing the QRadar Offense Details tab
• Building a playbook and analyzing results