About this course
Compare the roles of SIEM, SOAR and endpoint detection in security operations. This short, free IBM video course explains how teams collect signals, investigate activity and coordinate responses. It also distinguishes EDR from endpoint protection and next-generation antivirus approaches.
What you can learn
- SIEM concepts
- Security orchestration
- Incident automation
- Endpoint detection
- Endpoint protection
- Security-tool comparison
Course at a glance
| Provider | IBM |
|---|---|
| Platform | YouTube · IBM Technology |
| Access | Free Video |
| Level | Intermediate — WikiFree audience assessment |
| Language | English |
| Selected lessons | 4 |
| Video duration | 21m · allow extra time for reflection and practice |
| Details checked | 9 October 2026 |
Inside the course
Move from central event analysis to response orchestration, then examine endpoint detection and the boundaries between EDR, EPP and NGAV. Focus on how these capabilities complement one another.
Try this learning exercise
Describe how an unusual sign-in followed by suspicious endpoint activity would move from detection to investigation and response. Mark which steps might be automated and which require an analyst's decision.
How to follow the course
Choose a lesson from the list or search for a specific topic. Use Previous and Next to continue, and mark lessons complete as you go. Progress is saved in this browser without a WikiFree account.
Free access, requirements and certificates
The selected public YouTube videos are free to watch. No paid subscription, payment card or examination is required for this video learning path. WikiFree independently organizes IBM Technology explainers and tutorials for self-paced study. This listing is not an official IBM qualification and does not include an IBM certificate, graded assignment or instructor feedback.
Basic cybersecurity knowledge is helpful. This course does not include access to a commercial security operations platform.
Official IBM Technology playlist source ↗
Use this course in a learning path
- Free Security Incident Tabletop Learning PathCourse resource in this path
- Cybersecurity Analyst Career Path: Courses and Portfolio ProjectResource 02
Related courses for your next step
- Review a lower-level optionGoogle Unified SecOps: Free Security Operations Course
Focus: Security platform architecture literacy · SIEM and SOAR relationships
Beginner - Compare another approachGoogle Security Operations SOAR Analyst: Free Course
Focus: SOAR workflow awareness · Case-ingestion reasoning
Intermediate - Explore a higher-level optionGoogle Security Operations Deep Dive: Free Advanced Course
Focus: Telemetry-pipeline reasoning · Detection review
Professional
Compare course focus, level and study time
| Course | Level | Focus | Study time |
|---|---|---|---|
| This course — Free Security Operations Course: SIEM, SOAR and EDR | Intermediate | SIEM concepts · Security orchestration · Incident automation | 21m of video; practice time is additional |
| Google Unified SecOps: Free Security Operations Course | Beginner | Security platform architecture literacy · SIEM and SOAR relationships · Deployment planning vocabulary | 1 hour 45 minutes; official estimated study time, individual pace varies. |
| Google Security Operations SOAR Analyst: Free Course | Intermediate | SOAR workflow awareness · Case-ingestion reasoning · Playbook review | 4 hours 15 minutes; official estimate, individual study time varies. |
| Google Security Operations Deep Dive: Free Advanced Course | Professional | Telemetry-pipeline reasoning · Detection review · Tuning awareness | 1 hour 45 minutes; official estimate, individual study time varies. |
Provider: IBM. Videos play from the IBM Technology channel on YouTube.
Report a correction
Questions & discussion
Share a useful question or correction. Comments appear after moderation. Please avoid personal or sensitive information.