Introduction to SOAR

To defend against attacks, a SOC team relies on various security solutions, such as SIEM, EDR, firewalls, and threat intelligence platforms. They also communicate with IT and management teams as part of their processes. However, as threats grow more complex and advanced, SOC teams face challenges like alert fatigue, manual processes, too many disconnected tools, and difficulties in communication across teams.

In this room, we will explore how the Security Orchestration, Automation, and Response (SOAR) tool overcomes these challenges for a SOC team.

Learning Objectives

• Understand the traditional SOC and its challenges
• Explore how SOAR overcomes these challenges
• Learn SOAR Playbooks
• Practically walk through a threat intelligence workflow

Room Prerequisites

A look at the following rooms would be helpful before starting this room:

• SOC Fundamentals
• Junior Security Analyst Intro
• Intro to Detection Engineering