QRadar SOAR: Foundations
- Course Code BQ405G
- Duration 2 days
Course Delivery
Course Delivery
This course is available in the following formats:
-
Public Classroom
Traditional Classroom Learning
-
Virtual Learning
Learning that is virtual
Request this course in a different delivery format.
Course Overview
TopIn this course, you learn about the IBM Security® QRadar® SOAR architecture, and how to position the product in your company's security architecture design. You gain hands-on experience with the SOAR interface, by investigating and managing cases and users with the SOAR Breach Response module, playbooks, and email integration.
Virtual Learning
This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins.
Course Schedule
Top-
- Delivery Format: Virtual Learning
- Date: 19-20 January, 2026 | 9:00 AM to 5:00 PM
- Location: Virtual (GMT Standa)
- Language: English
-
- Delivery Format: Virtual Learning
- Date: 09-10 February, 2026 | 9:00 AM to 5:00 PM
- Location: Virtual (GMT Standa)
- Language: English
Target Audience
Top- Security operations center (SOC) Administrator
- SOC Analyst
- Security Analyst
- Incident Responder
- Managed Service Security Provider (MSSP)
Course Objectives
TopIn this course, you learn about the following topics:
- QRadar SOAR architectural patterns
- Install the product, and configure license and access
- Review the SOAR Console
- Manage cases
- Utilize the concept of artifacts
- Utilize case management capabilities
- Integrate email system for users and case management
- Focus on the Breach Response module
- Gain hands-on experience with the SOAR platform
- Design playbooks
- Integrate IBM and third-party solutions with SOAR
Course Content
TopGetting started
- Describe architectural patterns
- Install the product and configure license and access
- Review the SOAR Console
- Manage cases and use Breach Response add-on
- Utilize the concept of artifacts
Case management and email integration
- Utilize case management capabilities
- Integrate email system for users and case management
- Focus on the Breach Response module
Playbooks and integrations
- Gain hands-on experience with the SOAR platform
- Design playbooks
- Integrate IBM and third-party solutions with SOAR