Thanks to visit codestin.com
Credit goes to www.scribd.com

Scribd
Upload
39 views1 page

Chronicle SOAR

The document provides an overview of the Chronicle SOAR platform, detailing its features such as case management, IOC detection, and alert management. It covers integration with internal and external components, data ingestion, and the creation of custom ontologies and playbooks. Additionally, it includes guidance on configuring users, dashboards, and troubleshooting the platform.

Uploaded by

neoalt
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
39 views1 page

Chronicle SOAR

The document provides an overview of the Chronicle SOAR platform, detailing its features such as case management, IOC detection, and alert management. It covers integration with internal and external components, data ingestion, and the creation of custom ontologies and playbooks. Additionally, it includes guidance on configuring users, dashboards, and troubleshooting the platform.

Uploaded by

neoalt
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 1

Chronicle SOAR Overview

Introduction and overview


Platform Overview
Case Management
IOC detection
Entities graph analysis
Alert management
Allocating case to a security analyst
Introduction to Chronicle market place
Run use cases
Understanding Powerup
Configuring Users and environment
Chronicle integration with internal components
Chronicle external integration using marketplace
Understanding Connectors
Data ingestion using connectors
Understanding Ontology
View model family and field mapping
Build custom ontologies
Configure Mapping and modelling
Generate entities graphs using custom ontology
Understanding Playbooks
Configuring Automatic Triage
Building Play books
Understanding Triggers, Action and flow
Playbook life cycle management
Configuring Automatic and manual Actions
Configuring dashboards and reports
Understanding incident management
Configuring remote agents
Troubleshooting Chronicle SOAR

You might also like