4.7 Flashcards
Automation
Execution of tasks without manual intervention
Orchestration
Coordinated execution of multiple automated tasks for a specific outcome or
workflow
SOAR
SOAR (Security Orchestration, Automation, and Response)
■ Class of security tools for incident response, threat hunting, and security
configurations
■ Purpose
● Orchestrate and automate runbooks, deliver data enrichment
■ Example
● Integrating SIEM and SOAR for advanced security capabilities
Playbook
Checklist of actions for detecting and responding to a specific incidentRu
Runbook
automated version of a playbook with defined interaction points for human analysis
Executes automated tasks with human decision points
CICD
CI/CD includes continuous integration
● Continuous Delivery (CD) ensures code is always deployable after every
change
○ Automated testing and build processes
○ CD stops short of automatic production deployment
○ CD is part of the release process
○ Full deployment process is automated only to a certain stage
■ Doesn’t deploy into the production environment
automatically
○ Deployment to production environment is a manual business
decision
○ Allows flexi
Continuous Deployment
Takes CI/CD further by automatically deploying code changes to testing
and production environments
Integration
Combining subsystems or components into a single, functioning system
API
Set of rules and protocols used for building and integrating application software
■ Enable software developers to access functions or features of another
application programmatically
REST (Representational State Transfer)
REST uses standard HTTP methods, status codes, URIs, and MIME
types for interactions
○ Primarily uses JSON for data transfer
○ Lightweight protocol suitable for integrating with existing website
SOAP
SOAP (Simple Object Access Protocol)
SOAP has a structured message format in XML
○ Known for robustness, additional security features, and
transaction compliance
○ Suitable for enterprise-level web services with complex
transactions and regulatory compliance requirements
CURL
A tool for transferring data to or from a server using various supported
protocols
an api testing tool