Fortinet Fortisoar From Zero To Hero

Learn state-of-the-art Security Product that must have in any SOC arsenal

What you'll learn

Security Orchestration, Automation and Response (SOAR)

FortiSOAR

Use Cases

Hands-ON

Requirements

Intermediate Unix/Linux Skills

Intermediate Network Security Concepts

Description

FortiSOAR is a holistic Security Orchestration, Automation and Response (SOAR) workbench, designed for SOC teams to efficiently respond to the ever-increasing influx of alerts, repetitive manual processes, and shortage of resources. It pulls together all of organization's tools, helps unify operations and reduces alert fatigue, context switching, and the mean time to respond to incidents.FortiSOAR is extremely a flexible product with many important and usefull features, which along with outstanding customer support brings SOC environment to next level. FortiSOAR provides the ability to customize GUI and affect SOC working environment effectively. "Less clicks is better!" Robastic Integration with 3rd party tools - many API based connectors with example playbooks which can be easily adopted for company needs. Customer Support - great attitude, professionality, very customer oriented.Through baby steps you will learn Fortinet FortiSOAR important topics that include but not limited to the following:Intorduction to FortiSOARInstallation and LicenseGUI DemystifiedFoundations and ArchitectureIngesting FortiSIEM Incidents into FortiSOARIngesting Microsoft Exchange Office365 messages into FortiSOARInstalling and Configuring VirusTotal ConnectorDashboards, Templates and WidgetsModules Templates (Alert Module, Incident Module, Indicators Module)Searches and FiltersApplication EditorDynamic Variables and Jinga FiltersPlaybooks (Core Steps (Set Variable and Create, Update, and Find Record) + Evaluation Steps (Decision, Wait, Approval, Manual Task, Manual Input)UseCase 1: Reassign AnalystUse Case 2: Perform IP Enrichment for Newly Added IOCEnroll and gain a new competitive skill that is of high demad in the security field now.

Overview

Section 1: Part I - FortiSOAR Basics

Lecture 1 Introduction

Lecture 2 Installation

Lecture 3 GUI Demystified - part1

Lecture 4 GUI Demystified - part2

Lecture 5 Foundations and Architecture

Lecture 6 Ingesting FortiSIEM Incidents into FortiSOAR

Lecture 7 Ingesting Microsoft Exchange Office365 messages into FortiSOAR

Lecture 8 Installing and Configuring VirusTotal Connector

Lecture 9 Dashboards, Templates and Widgets

Lecture 10 Module Templates

Lecture 11 Searches and Filters

Lecture 12 Application Editor

Section 2: Part II - Playbooks

Lecture 13 Playbooks introduction & Trigger Steps

Lecture 14 Core steps

Lecture 15 Evaluate steps

Lecture 16 Execute and other steps

Lecture 17 First playbook - Reassign Analyst

Lecture 18 Perform IP Enrichment for Newly Added IOC

Network Security Specialists & Administrators,SOC Operators & Analysts,Information Security Sepcialists