In-Person Event

Ansible Security Automation Workshop

January 28, 2020Hartford, ConnecticutUpward Hartford

Who is this workshop best for?
The workshop is intended as an introductory course for Ansible Security Automation designed for people who want to learn how Ansible can be leveraged in security environments. The intended audience is technical professionals in automation [part of a cross-functional team or supporting other vertical teams in their company], security operations and vulnerability management.

There is no previous knowledge about Ansible required to access this workshop, though it certainly helps.

Description
This workshop shows, step by step, how you can reach this goal using Ansible to orchestrate three investigation and response activities involving multiple security tools -  an enterprise firewall [CheckPoint Next Generation Firewall], an intrusion detection system [Snort] and a SIEM [Splunk Enterprise Security].

Agenda

  • Introduction to Ansible Security Automation
  • How Ansible integrates with security products
  • Explore the lab environment:
    • Ansible execution host
    • Enterprise Firewall: Check Point Next Generation Firewall
    • IDS: Snort
    • SIEM: Splunk Enterprise Security
  • Automate security platforms:
    • Execute your first security automation playbook - meet Check Point NGFW
    • Execute a security automation playbook targeting Snort IDS
    • Execute a security automation playbook targeting Splunk ES
  • Tie the 3 technologies together:
    • Use case 1: Detection and triage of suspicious activities
    • Use case 2: Threat hunting
    • Use case 3: Incident response
  • Wrap it all up
Introduction & settle-in  
8:30 a.m. - 12:00 p.m. -- MORNING SESSIONS
  • Introduction to Ansible
  • Running Ad-hoc Commands
  • Writing Your First Playbook
  • Using Variables
  • Conditionals, Handlers and Loops
  • Building Templates
  • Roles
12:00 p.m. - 1:00 p.m. -- LUNCH  
1:00 p.m. - 3:30 p.m. -- AFTERNOON SESSIONS
  • Introduction to Tower
  • Inventories
  • Credentials
  • Ad-Hoc commands
  • Projects
  • Job Templates
  • Using the Survey Feature
  • Role Based Access Control
  • Workflows

Location
Upward Hartford
20 Church Street
Hartford, Connecticut  06103


Date: Tuesday, January 28, 2020

Time: 8:30 a.m. – 3:30 p.m.

Location: Discover Room - 17th Floor

Parking: Please park in the MAT Garage attached to the building and bring your ticket inside for parking validation.

What is an Ansible Workshop?

Who should attend?

If you have any questions please send us an email.

Hear from the experts

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed quis ornare erat, sit amet aliquet tortor. Aenean dapibus leo nec commodo blandit. Aliquam erat volutpat. Aenean ac rutrum nisl, non volutpat metus