The Splunk Phantom Certified Admin (SPLK-2003) course prepares IT and cybersecurity professionals to deploy, configure, administer, and automate security operations using Splunk SOAR. Students gain hands-on experience with playbooks, integrations, case management, automation workflows, and incident response while preparing for the legacy Splunk Phantom Certified Admin certification.
Curriculum
- 12 Sections
- 0 Lessons
- 12 Weeks
Expand all sectionsCollapse all sections
- Week 1: Introduction to Splunk SOAR & Platform Architecture0
- Week 2: Installation, Configuration & Initial Setup0
- Week 3: User Management, Roles & Authentication0
- Week 4: Apps, Assets & Data Ingestion0
- Week 5: Events, Containers & Case Management0
- Week 6: Playbook Fundamentals & Visual Playbook Editor0
- Week 7: Actions, Decisions & Workflow Automation0
- Week 8: REST API Integrations & Automation Best Practices0
- Week 9: Threat Intelligence & Splunk Integration0
- Week 10: Monitoring, Troubleshooting & Performance Optimization0
- Week 11: Hands-On Labs & SOAR Automation Scenarios0
- Week 12: Final Review & Certification Exam Preparation0
