Part 2: SOAR Tools and Automation Hands-On Examples

As the first part provided a more theoretical perspective, the second part will focus on real tools and examples. At the start of Part 2, we will introduce a few SOAR tools and showcase what SOAR elements look like in real life. After that, we will focus on automation using Microsoft Sentinel, where we will create playbooks step by step – from planning and designing to testing them.

This part contains the following chapters:

• Chapter 4, Quick Dig into SOAR Tools
• Chapter 5, Introducing Microsoft Sentinel Automation
• Chapter 6, Enriching Incidents Using Automation
• Chapter 7, Managing Incidents with Automation
• Chapter 8, Responding to Incidents Using Automation
• Chapter 9, Mastering Microsoft Sentinel Automation: Tips and Tricks