$54.99
FREE Returns
In Stock
$$54.99 () Includes selected options. Includes initial monthly payment and selected options. Details
Price
Subtotal
$$54.99
Subtotal
Initial payment breakdown
Shipping cost, delivery date, and order total (including tax) shown at checkout.
Ships from
Amazon.com
Ships from
Amazon.com
Sold by
Amazon.com
Sold by
Amazon.com
Returns
Eligible for Return, Refund or Replacement within 30 days of receipt
Eligible for Return, Refund or Replacement within 30 days of receipt
This item can be returned in its original condition for a full refund or replacement within 30 days of receipt.
Read full return policy
Returns
Eligible for Return, Refund or Replacement within 30 days of receipt
This item can be returned in its original condition for a full refund or replacement within 30 days of receipt.
Read full return policy
Payment
Secure transaction
Your transaction is secure
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
Payment
Secure transaction
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
Amazon book clubs early access
Loading your book clubs
There was a problem loading your book clubs. Please try again.
Not in a club? Learn more
Amazon book clubs early access

Join or create book clubs

Choose books together

Track your books
Bring your club to Amazon Book Clubs, start a new book club and invite your friends to join, or find a club that’s right for you for free.
Explore Amazon Book Clubs
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

Follow the author

Benjamin Kovacevic
+ Follow
More books from this author
Something went wrong. Please try your request again later.

Security Orchestration, Automation, and Response for Security Analysts: Learn the secrets of SOAR to improve MTTA and MTTR and strengthen your organization's security posture

by Benjamin Kovacevic (Author)
5.0 5.0 out of 5 stars 10 ratings
See all formats and editions
{"desktop_buybox_group_1":[{"displayPrice":"$54.99","priceAmount":54.99,"currencySymbol":"$","integerValue":"54","decimalSeparator":".","fractionalValue":"99","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"frpyMR1k5bksHmWu415pv%2F8eWDDy5Jc9ZvhoUz8vk6DrU4pfOw6rlBDg76FYfCMpQjE4%2BSOauRuKaSsOEY%2B04y261ITnyWfvGfgsY1Mo3hxNPY%2BOZu6TrtAChJuR6%2FQ6IcGYnWpdgs9MExt9Y8Rt9w%3D%3D","locale":"en-US","buyingOptionType":"NEW","aapiBuyingOptionIndex":0}]}

Purchase options and add-ons

Become a security automation expert and build solutions that save time while making your organization more secure


Key Features:

What's inside

  • An exploration of the SOAR platform's full features to streamline your security operations
  • Lots of automation techniques to improve your investigative ability
  • Actionable advice on how to leverage the capabilities of SOAR technologies such as incident management and automation to improve security posture


Book Description:

What your journey will look like

With the help of this expert-led book, you'll become well versed with SOAR, acquire new skills, and make your organization's security posture more robust.

You'll start with a refresher on the importance of understanding cyber security, diving into why traditional tools are no longer helpful and how SOAR can help.

Next, you'll learn how SOAR works and what its benefits are, including optimized threat intelligence, incident response, and utilizing threat hunting in investigations.

You'll also get to grips with advanced automated scenarios and explore useful tools such as Microsoft Sentinel, Splunk SOAR, and Google Chronicle SOAR.

The final portion of this book will guide you through best practices and case studies that you can implement in real-world scenarios.

By the end of this book, you will be able to successfully automate security tasks, overcome challenges, and stay ahead of threats.


What You Will Learn:

  • Reap the general benefits of using the SOAR platform
  • Transform manual investigations into automated scenarios
  • Learn how to manage known false positives and low-severity incidents for faster resolution
  • Explore tips and tricks using various Microsoft Sentinel playbook actions
  • Get an overview of tools such as Palo Alto XSOAR, Microsoft Sentinel, and Splunk SOAR


Who this book is for:

You'll get the most out of this book if

You're a junior SOC engineer, junior SOC analyst, a DevSecOps professional, or anyone working in the security ecosystem who wants to upskill toward automating security tasks

You often feel overwhelmed with security events and incidents

You have general knowledge of SIEM and SOAR, which is a prerequisite

You're a beginner, in which case this book will give you a head start

You've been working in the field for a while, in which case you'll add new tools to your arsenal

Read more Read less
Previous page
  1. ISBN-10
    1803242914
  2. ISBN-13
    978-1803242910
  3. Publisher
    Packt Publishing
  4. Publication date
    July 21, 2023
  5. Language
    English
  6. Dimensions
    9.25 x 7.52 x 0.7 inches
  7. Print length
    338 pages
  8. See all details
Next page
Amazon First Reads | Editors' picks at exclusive prices

Frequently bought together

Security Orchestration, Automation, and Response for Security Analysts: Learn the secrets of SOAR to improve MTTA and MTTR an
$54.99
Get it as soon as Wednesday, May 15
In Stock
Ships from and sold by Amazon.com.
+
Practical Threat Detection Engineering: A hands-on guide to planning, developing, and validating detection capabilities
$45.59
Get it as soon as Wednesday, May 15
In Stock
Ships from and sold by Amazon.com.
Total price:
To see our price, add these items to your cart.
Details
Added to Cart
Choose items to buy together.

Editorial Reviews

Review

"An organization’s Security Operations Center (SOC) can become overwhelmed if too many alerts are generated and there are not enough SOC analysts to triage them, or skilled cybersecurity workers to fill the positions needed to respond. This is why an automated response to security incidents is a must. SOAR is the answer to an organization’s SOC overcoming these challenges. SOAR can be used to reduce the number of alerts that need investigation and triage, to automate parts of normal investigations and save SOC analysts’ time, and more importantly, to automate remediation, leading to quick actions to resolve security incidents. In this book, you will learn about security orchestration, automation, and response in depth, both in theory and principle, using real playbook examples to automate a response. You will learn about the tools available and the various methods to implement them as a partial or complete security incident response. Benjamin is a skilled professional and expert in SOAR, helping customers implement it and creating samples, shared through open source to help organizations enable their security automation."

--

Nicholas DiCola,

Vice President of Customers

Zero Networks

About the Author

Benjamin Kovacevic is a cyber-security enthusiast with hands-on experience with Microsoft XDR and SIEM platforms. Currently working with Microsoft Sentinel as a Product Manager, he is focusing on the SOAR component of the solution and working on new capabilities that will help SOCs improve their investigation and response. Benjamin is constantly working to improve his knowledge about cyber-security, as well as to share knowledge about Microsoft SOAR. He is the author of Microsoft Sentinel Automation training, as well as blog posts around tips and tricks to jump-start with Microsoft Sentinel Automation.

Benjamin is originally from Bosnia and Herzegovina but currently resides in Ireland with his wife and son.

Product details

  • Publisher ‏ : ‎ Packt Publishing (July 21, 2023)
  • Language ‏ : ‎ English
  • Paperback ‏ : ‎ 338 pages
  • ISBN-10 ‏ : ‎ 1803242914
  • ISBN-13 ‏ : ‎ 978-1803242910
  • Item Weight ‏ : ‎ 1.3 pounds
  • Dimensions ‏ : ‎ 9.25 x 7.52 x 0.7 inches
  • Customer Reviews:
    5.0 5.0 out of 5 stars 10 ratings

About the author

Follow authors to get new release updates, plus improved recommendations.
Benjamin Kovacevic

Benjamin Kovacevic

Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.

Benjamin Kovacevic is a cyber-security enthusiast with hands-on experience with Microsoft XDR and SIEM platforms. Currently working with Microsoft Sentinel as a Senior Product Manager, he is focusing on the SOAR component of the solution and working on new capabilities that will help SOCs improve their investigation and response. Benjamin is constantly working to improve his knowledge about cyber-security, as well as to share knowledge about Microsoft SOAR. He is the author of Microsoft Sentinel Automation training, as well as blog posts around tips and tricks to jump-start with Microsoft Sentinel Automation. Benjamin is originally from Bosnia and Herzegovina but currently resides in Ireland.

Customer reviews

5 out of 5 stars
5 out of 5
10 global ratings

Top reviews from the United States

Chris
5.0 out of 5 stars SOARing over and above other SIEM/SOAR SOC reference guides!
Reviewed in the United States on October 15, 2023
This Security Orchestration, Automation, and Response book by Benjamin Kovacevic absolutely SOARS over and above any other Microsoft Sentinel (SIEM) book out there, hands down! Not only does this book come directly from the Product Manager/Team responsible for features and functionality within Microsoft Sentinel, it's physically jam packed with examples and best practices to integrate, detect, automate, analyze and respond to current and future persistent cybersecurity threats. This resource keeps the examples easy to follow but challenging enough to even folks that have been in this space for a while and gives tips on additional products like Splunk and Google SOAR offerings to help compare and contrast!

I personally love the section covering enrichment of incidents with Logic Apps design and automation - with a small background in both Logic Apps and Power Automate, this inspires so many additional use cases that can be quickly and easily created within Microsoft Sentinel. A true zero to hero reference that any SOC Analyst should have within reach!
Helpful
 Report
Reggie D
5.0 out of 5 stars The Ultimate Guide to SOAR for Security Analysts
Reviewed in the United States on August 15, 2023
"Security Orchestration Automation and Response for Security Analysts" by Benjamin Kovacevic and Nicholas DiCola is an excellent resource for security analysts who want to learn more about SOAR (Security Orchestration, Automation, and Response). The book covers all of the essential topics in SOAR, from the basics of what SOAR is and how it works to more advanced topics such as playbook development and automation.

The authors do a great job of explaining complex concepts in a clear and concise way. They also provide plenty of real-world examples to illustrate their points. The book is well-organized and easy to follow, even for those who have no prior experience with SOAR.

I particularly appreciated the book's focus on practical application. The authors provide step-by-step instructions on how to build and deploy SOAR playbooks, and they also provide a number of templates that security analysts can use to get started.

Overall, I highly recommend "Security Orchestration Automation and Response for Security Analysts" to anyone who wants to learn more about SOAR. It is a comprehensive and informative resource that will help security analysts improve their skills and knowledge in this important area.

Here are some of the specific things I liked about the book:

The authors have a deep understanding of SOAR and they do a great job of explaining complex concepts in a clear and concise way.
The book is well-organized and easy to follow, even for those who have no prior experience with SOAR.
The book provides plenty of real-world examples to illustrate the concepts being discussed.
The book focuses on practical application, providing step-by-step instructions on how to build and deploy SOAR playbooks.
The book includes a number of templates that security analysts can use to get started with SOAR.
If you are a security analyst who is interested in learning more about SOAR, I highly recommend reading "Security Orchestration Automation and Response for Security Analysts". It is a comprehensive and informative resource that will help you improve your skills and knowledge in this important area.
Helpful
 Report
Austin Gettel
5.0 out of 5 stars A Great Resource to Learn How to Create and Manage a SOAR inside MS Sentinel SIEM tool.
Reviewed in the United States on August 28, 2023
Security Orchestration, Automation, and Response for Security Analysts is a well written introduction to the use of Security Orchestration, Automation, and Response tools (SOARs) to automate handling alerts generated by logs in SIEM tools generally used by Cybersecurity analysts to monitor network and computer activity for any signs of hacking. The book explains very well the current state of Cybersecurity and the role SOARs currently play, as well as a great argument for the need for automation to avoid burnout. It teaches the concepts of incident management and how to perform the investigation from following NIST and SANS frameworks. Most importantly it teaches how to implement a SOAR into Microsoft's Azure Sentinel SIEM tool, as well as tips and tricks to master Sentinel automation. The included directions are very detailed and easy to follow step-by-step. This book is a must have for seasoned analysts and those that are just trying to break into the Cybersecurity industry and looking for their first SOC job.
Helpful
 Report
Raymond
5.0 out of 5 stars Much needed for SOC Analysts and Cybersecurity Professionals
Reviewed in the United States on August 16, 2023
Having completed a Bachelors degree in cybersecurity, I was dismayed by very minimal coverage of SIEM and SOAR technology.
I have had to go to online sources for training material and few textbooks had more than a few pages of information. Thus ,I was happy to receive a copy of this.The author gives a great overview and then goes deeper into use , management and automation with SOAR and its use in threat intelligence, incident response, and threat hunting with SOAR byof Microsoft ,Splunk ,Palo Alto & Google. A great addition to my infosec library on a topic difficult to find current material on.
Helpful
 Report
Brodie
5.0 out of 5 stars Excellent Guide of SOAR and Strategies
Reviewed in the United States on August 22, 2023
Technical Reviewer (Disclaimer)
A guide not tool agnostic but security oriented to multiple platforms with hands on examples and use of third party apis to include in your workflow for orchestration. Definitely a tool to keep in your arsenal of SOAR operations. If you are starting your journey in Splunk, or Sentinel this is a must use in guiding decision points and operations.
Helpful
 Report
Nicholas L DiCola
5.0 out of 5 stars A must have for SOAR Administrators/Engineers
Reviewed in the United States on August 15, 2023
"Security Orchestration, Automation, and Response: A Guide for Analysts" is a game-changing book for anyone in cybersecurity. The authors skillfully navigate through the complex world of SOAR, making it accessible even for beginners. The practical examples and up-to-date insights ensure that both theory and application are covered comprehensively. A standout feature is the authors' attention to detail, offering solutions to challenges and sharing best practices. Whether you're a newbie or a pro, this book is a vital resource for mastering effective security automation.
Helpful
 Report