IBM Resilient
Click roadmap title to expand/collapse roadmap
Getting Started with IBM Resilient SOAR Platform
The total time required to complete this roadmap is 5h 9m.
This roadmap is designed to provide an initial introduction to Resilient Incident Response Program.
Overview and install
These courses help you to understand how Resilient can be integrated into your environment and provide the tools to get started.
IBM Cloud Pak for Security overview
Tour Resilient on the Security Learning Academy
Introduction to IBM Resilient SOAR
Getting started with IBM Resilient
On-premises setup
Learn how to perform the initial configuration to start using Resilient.
User management and authentication
Learn how to configure user access
Setting up alternative authentication mechanisms in the IBM Resilient appliance
Managing users and groups in Resilient
Common use cases
Learn about typical scenarios for using Resilient.
Badges and Certifications
Official IBM badges and professional certifications related to this role that can be earned
Click roadmap title to expand/collapse roadmap
Resilient Application Administrator/Saas Administrator (Master Administrator)
The total time required to complete this roadmap is 2h 18m.
These courses teach you how to administer Resilient on both an On premise or SaaS deployment of Resilient SOAR platform
Managing users
Managing users and groups in Resilient
Resilient - Deleting or Deactivating a User
Resilient - Deactivate user / Reassign
Working with Resilient roles
Resilient - Deleting Roles
Authentication
Setting up the ORG
These courses teach you how to configure the Resilient Organization
Resilient - Organization Details
Resilient - Organization Settings
Resilient - Migrating Organizational Settings
Resilient - Defanging URLs
Resilient - Threat Sources Overview
Resilient - Notifications and substitution
Configuring automatic processing of inbound email in Resilient
Workspaces
Click roadmap title to expand/collapse roadmap
Playbook Designer/ Developer
The total time required to complete this roadmap is 9h 28m.
This roadmap instructs the designer in the features available for creating playbooks within Resilient
Foundations of Design
These courses are about using the design components which make up a playbook in the Resilient SOAR platform.
Resilient - Modify the New Incident Wizard Layout
Resilient - Reporting Custom Sections / Flags
Resilient - Delete Incident / Bulk Actions
Resilient - Artifact Relation
Resilient - Threat Sources Overview
Creating custom graphs in the Resilient application
Resilient - Notifications and substitution
Resilient - How To Create Wikis
Resilient - Data Tables
Resilient Rules and Workflows
Resilient - Workflows
Resilient - Dynamic Playbooks / Rules
Resilient Developer's Corner - Integration First Steps
Building the MITRE ATT&CK Framework into your Resilient Incident Response
Resilient - Tracking time spent on incident field values
Automation and Integrations
These courses teach you about automation of your playbooks in the Resilient SOAR platform.
Common Resilient use cases
Resilient Metrics Systems Administration
Scale and Improve Automation in Resilient
Resilient Data Feeder Integration
Resilient Developer's Corner - Integration First Steps
Resilient Developer's Corner: Rules and Workflows
Publishing to the App Exchange
Inbound Mail Parsing and Configuration of Outbound Email for Resilient
NEW
Resilient Intelligent Orchestration
Developing and Converting Apps for App Host in Resilient
Implementing your own Integration & Python Script into App Host
NEW
Click roadmap title to expand/collapse roadmap
Security Analyst
The total time required to complete this roadmap is 48m.
As a Security Analyst you will learn how to manage, use and respond to security events using Resilient playbooks.
Resilient Security Foundations
These courses teach you how to investigate and remediate security incidents using Resilient.
Resilient - Defanging URLs
Resilient - How To Create Wikis
Resilient - Notifications and substitution
Resilient - Search
Resilient - Reporting Custom Sections / Flags
Configuring SMTP Notifications for IBM Resilient
An Introduction to the IBM Resilient SOAR Interface
Resilient Dashboards and Reporting
These courses teach you how to create custom dashboards and reports from your incident data
Resilient - Creating custom graphs for incident time tracking data
Resilient - Reporting Custom Sections / Flags
Creating custom graphs in the Resilient application
Artifacts and Threat Feeds
These courses will teach you how threat intelligence can perform automatic enrichment for artifacts.
Resilient - Threat Sources Overview
Resilient - Artifact Relation
Resilient - Creating Custom Artifact Types
Click roadmap title to expand/collapse roadmap
Privacy Officer
The total time required to complete this roadmap is 37m.
As a Privacy Officer/ Analyst you will learn how to configure Resilient Privacy and to manage, use and respond to privacy events in your organization.
Resilient Privacy Foundations
These courses will teach you how to manage and respond to privacy events using Resilient SOAR platform.
Managing GDPR Data Breach Notification Requirements with the Resilient Incident Response Platform
Resilient - How to Pre-Select Privacy Regulators
Resilient - How To Create a Notify Data Protection Officer (DPO) Task in Resilient
Customize Your Framework to Comply with a Federal Trade Commission Consent Order
Click roadmap title to expand/collapse roadmap
Resilient System Administrator (OVA Administrator)
The total time required to complete this roadmap is 2h 35m.
These courses teach you how to install and configure IBM Resilient on both the OVA and BYORHEL on premise deployments
Install
Resilient Prerequisites
Initial configuration of the IBM Resilient appliance
Resilient - Installing via an OVA File
Resilient - External Network Configuration
Configuration
Resilient security
Resilient - Backing up the Keyvault
Resilient - Encrypting the Keyvault Password
Resilient - Keyvaults, Keystores and Secrets
Logging and troubleshooting
Managing logs in the IBM Resilient appliance
Troubleshooting Resilient and QRadar Integration Open Mic
Authentication
Setting up alternative authentication mechanisms in the IBM Resilient appliance
Managing users and groups in Resilient
Backup and DR
Resilient - Backing up and Restoring
Using Resilient disaster recovery health checks
Running Resilient disaster recovery playbooks
Setting up Resilient disaster recovery
Troubleshooting Resilient and QRadar Integration Open Mic
Experts from the IBM Resilient and QRadar Support teams show the SOC analyst how to safely and effectively troubleshoot their Resilient integration with QRadar when issues arise. This video is a recording of a live Open Mic web seminar originally broadcast
on 29-July-2020.
Agenda:
- How to enable debug and retrieve logs
- Checking connectivity
- How to read the logs
- Using the IBM QRadar API
- Common errors
- Opening a case, what next?
- Questions for the panel
Duration: 26minutes
Developing and Converting Apps for App Host in Resilient
This course was originally broadcast as a live web seminar on 6-June-2020.
Resilient Engineering Manager Mark Scherfling walks us through the features and enhancements associated with building apps in the AppHost environment of IBM Security Resilient SOAR platform v37.
Agenda
- Review of resilient-sdk
- App Host for Developers
- Migrating to App Host
- Developing for App Host
- Current Issues
- Resources & References
Duration: 40 minutes