<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="36996" language="de" source="https://portal.flane.ch/swisscom/xml-course/opentext-3-7320" lastchanged="2026-03-13T01:17:45+01:00" parent="https://portal.flane.ch/swisscom/xml-courses"><title>ArcSight Security Orchestration Automation and Response Administration and Configuration</title><productcode>3-7320</productcode><vendorcode>MF</vendorcode><vendorname>OpenText</vendorname><fullproductcode>MF-3-7320</fullproductcode><version>1.0</version><objective>&lt;p&gt;On completion of this course, you should be able to:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Configure ArcSight SOAR to receive alerts from ESM.&lt;/li&gt;&lt;li&gt;Describe the SOAR workflow.&lt;/li&gt;&lt;li&gt;Configure integrations.&lt;/li&gt;&lt;li&gt;Configure filtering, classifying, consolidating and dispatching rules.&lt;/li&gt;&lt;li&gt;Create workflow playbooks.&lt;/li&gt;&lt;li&gt;Review system status.&lt;/li&gt;&lt;li&gt;Run schedule and export reports&lt;/li&gt;&lt;/ul&gt;</objective><essentials>&lt;p&gt;This course assumes familiarity with ESM.&lt;/p&gt;</essentials><contents>&lt;p&gt;This course teaches you how to configure ArcSight SOAR. You will learn how to configure SOAR to receive Enterprise Security Manager (ESM) alerts, integrate with other products to enrich cases, and create workflow playbooks, in addition to configuring other features of the product.&lt;/p&gt;
&lt;p&gt;The course uses lectures and a series of hands-on labs to teach the course material. The hands-on labs for this course use the current version of the SOAR software.&lt;/p&gt;
&lt;p&gt;Highlights:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Navigate Content Server by using the various Content Server tools&lt;/li&gt;&lt;li&gt;Manage documents by adding, editing, versioning, and deleting them in the Smart View and Classic View based on your document permissions&lt;/li&gt;&lt;li&gt;Find information using collections, shortcuts, versions, and generations&lt;/li&gt;&lt;li&gt;Personalize your user environment&lt;/li&gt;&lt;/ul&gt;</contents><objective_plain>On completion of this course, you should be able to:


- Configure ArcSight SOAR to receive alerts from ESM.
- Describe the SOAR workflow.
- Configure integrations.
- Configure filtering, classifying, consolidating and dispatching rules.
- Create workflow playbooks.
- Review system status.
- Run schedule and export reports</objective_plain><essentials_plain>This course assumes familiarity with ESM.</essentials_plain><contents_plain>This course teaches you how to configure ArcSight SOAR. You will learn how to configure SOAR to receive Enterprise Security Manager (ESM) alerts, integrate with other products to enrich cases, and create workflow playbooks, in addition to configuring other features of the product.

The course uses lectures and a series of hands-on labs to teach the course material. The hands-on labs for this course use the current version of the SOAR software.

Highlights:


- Navigate Content Server by using the various Content Server tools
- Manage documents by adding, editing, versioning, and deleting them in the Smart View and Classic View based on your document permissions
- Find information using collections, shortcuts, versions, and generations
- Personalize your user environment</contents_plain><duration unit="d" days="3">3 Tage</duration><pricelist><price country="DE" currency="EUR">2400.00</price></pricelist><miles/></course>