Reader small image

You're reading from  CompTIA Security+ SY0-701 Certification Guide - Third Edition

Product typeBook
Published inJan 2024
PublisherPackt
ISBN-139781835461532
Edition3rd Edition
Right arrow
Author (1)
Ian Neil
Ian Neil
author image
Ian Neil

Ian Neil is one of the world's top trainers of Security+. He is able to break down information into manageable chunks so that people with no background knowledge can gain the skills required to become certified. He has recently worked for the US Army in Europe and designed a Security+ course that catered to people from all backgrounds (not just IT professionals), with an extremely successful pass rate. He is an MCT, MCSE, A+, Network+, Security+, CASP, and RESILIA practitioner that has worked with high-end training providers over the past 23 years and was one of the first technical trainers to train Microsoft internal staff when they opened their Bucharest Office in 2006.
Read more about Ian Neil

Right arrow

Security Orchestration, Automation, and Response (SOAR)

SOAR is an automated tool that integrates all of your security processes and tools in a central location. This is an automated process that uses machine learning and artificial intelligence (making it faster than human staff performing the same tasks) to search for evidence of an attack, reduce the mean time to detect (MTTD) and respond to events, and potentially, release members of the IT team to carry out other tasks. The SOAR system is set up with various playbooks that outline the symptoms of an attack, with the action that the SOAR system needs to take, as follows:

  • Orchestration: SOAR seamlessly integrates with a variety of security tools, data sources, and APIs to coordinate and execute complex workflows, ensuring that security processes are well-structured, standardized, and executed consistently.
  • Automation: Automation empowers organizations to streamline operations by automating routine and time-consuming...
lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
CompTIA Security+ SY0-701 Certification Guide - Third Edition
Published in: Jan 2024Publisher: PacktISBN-13: 9781835461532

Author (1)

author image
Ian Neil

Ian Neil is one of the world's top trainers of Security+. He is able to break down information into manageable chunks so that people with no background knowledge can gain the skills required to become certified. He has recently worked for the US Army in Europe and designed a Security+ course that catered to people from all backgrounds (not just IT professionals), with an extremely successful pass rate. He is an MCT, MCSE, A+, Network+, Security+, CASP, and RESILIA practitioner that has worked with high-end training providers over the past 23 years and was one of the first technical trainers to train Microsoft internal staff when they opened their Bucharest Office in 2006.
Read more about Ian Neil