This webinar helped familiarize participants with how to respond to incidents, manage cases and artifacts, automate their incident response, and standard operating procedures. Participants walked through a real-world scenario and see first-hand how Splunk SOAR can be used to create a notable event to enrich alerts by automatically gathering data, all the way to managing and resolving the incident.

During this webinar, they:

• Gained a better understanding of the SOAR platform through a live demo and understand how it can add value to your organization
• Learned about SOAR apps and assets
• Learned to leverage SOAR to comply with OMB M-21-31 mandates
• Discovered how to investigate incidents with automation
• Learned how Splunk SOAR can save time and resources by increasing your SOC's current productivity without increasing headcount
• Learned about workbooks and case management
• Gained insight into playbook development for automation of investigation and response