QRadar SOAR: Integration with Microsoft Active Directory [TDS_BQ440G]

OVERVIEW

Gain hands-on experience with the IBM Security® QRadar® SOAR platform. Learn how to integrate with Active Directory by using the LDAP and Active Directory Function for SOAR app integration. Explore the actions which can be performed from the SOAR platform to respond to cases which users are involved.

This course is designed and built on a QRadar SOAR stand-alone virtual machine (v50.1.54) with a complementary SOAR App Host (v1.14.1). However, the concepts that the course covers apply to all on-premises or SaaS versions of QRadar SOAR.

Virtual Learning

This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins.

OBJECTIVES

What you will learn:

• Gain hands-on experience with the SOAR console
• Integrate the LDAP and Active Directory Function for SOAR solution
• The actions that you can take on Active Directory from the SOAR platform

Skills you will gain:

• SOAR Software
• Playbooks
• Threat response

AUDIENCE

• Security Operations Center (SOC) Analyst
• Security Analyst
• Incident Responder
• Managed Service Security Provider (MSSP)

CONTENT

Section 1: Video of LDAP and Active Directory integration with QRadar SOAR

Section 2: Lab