Who is this workshop best for?

The workshop is an introductory course for Red Hat® Ansible® Automation Platform security automation designed for technical professionals in automation (part of a cross-functional team or supporting other vertical teams in their company), security operations, and vulnerability management, who want to learn how Ansible Automation Platform can be used in security-focused environments. No previous experience with Ansible Automation Platform is required.

Description

Ansible Automation Platform is a simple yet powerful IT automation engine for application deployment, configuration management, and orchestration that you can learn quickly. 

Get started with Ansible Automation Platform security automation by implementing automation for three security use cases: 

• Orchestrating firewall.s
• IDS and SIEM: Investigating suspicious traffic on a web server.
• Threat hunting: Analyzing unusual denied accesses on a firewall and remediation of a SQL injection.

After a brief introduction, we’ll guide you through basic concepts and show you how to use Ansible Automation Platform security automation in combination with existing third-party security solutions.

Topics

• Introduction to Ansible Automation Platform security automation basics
  • Executing the first Check Point playbook
  • Executing the first Snort playbook
  • Executing the first IBM QRadar playbook
• Ansible Automation Platform security automation use cases
  • Investigation enrichment
  • Threat hunting
  • Incident response