QRadar FAQs answered

We have come a long way and covered all fundamental aspects of IBM QRadar. In this appendix, we will cover all the major queries that QRadar admins and SOC analysts will have when working with QRadar.

Query 1

What are the other major IBM security products that can be integrated with IBM QRadar?

In this book, when we talk about IBM QRadar, we also mean the IBM QRadar Security information and event management (SIEM) solution. QRadar SIEM deals with collecting data in terms of flows and events and generating security alerts. Out of all the IBM security products, IBM QRadar SOAR best complements IBM QRadar SIEM.

SOAR stands for security orchestration and response. IBM QRadar SOAR is a different product (from QRadar SIEM), which was previously known as Resilient. The offenses that are generated in IBM QRadar SIEM are sent to IBM QRadar SOAR, where they are known as incidents.

QRadar SOAR can integrate with different products too, to receive security incidents...