Incident Response and SOAR Automation
Responding to incidents with Google Security Operations SOAR: playbooks, triage, containment, investigation and lessons learned.
GCP-383 12 lessons planned ▶ Video lessons coming soon
Offered by HSM University · Google Cloud Certification Prep
Course content
- 1The incident response lifecycleComing
- 2Alert triage and prioritizationComing
- 3Case managementComing
- 4SOAR playbooks and blocksComing
- 5Automating enrichmentComing
- 6Containment actions in Google CloudComing
- 7Investigating cloud incidentsComing
- 8Evidence handling and documentationComing
- 9Communicating during incidentsComing
- 10Post-incident review and improvementComing
- 11Measuring SOC performanceComing
- 12Case study: responding to a compromised accountComing
Requirements
Recommended background. You can start any course at any time.
Description
Responding to incidents with Google Security Operations SOAR: playbooks, triage, containment, investigation and lessons learned.