We’re excited to share some important updates about QRadar on-premise! QRadar on-premise remains a core focus of IBM. Active development, strategic investment and full support for the platform will continue, with no plans for end-of-life. QRadar on-premise has a strong and enduring roadmap ahead!

We’ve been busy designing and building over the last year and have some exciting features and products on the horizon. Take a look at what we plan to bring to your QRadar experience in the coming months:

• Introduction of Generative AI capabilities powered by WatsonX

• Enhanced Analytics and search performance

• Improved user workflows, user experience, and detection content

• Operational enhancements including reduced upgrade downtimes, automated DR, etc.

• Continued support for new integrations and ecosystem support

As we look ahead, we envision a future where QRadar continues to evolve and adapt to meet the ever-changing cybersecurity landscape. Our commitment to innovation means that you can expect QRadar to keep pace with emerging threats and set new standards in security operations. With these upcoming features, we aim to empower your security teams to work more efficiently, respond faster, and stay ahead of potential risks. Together, we can build a safer and more secure digital world.

New Feature Spotlight

QRadar Investigation Assistant

Making Security Simpler and Smarter

IBM is excited to introduce the QRadar Investigation Assistant, a powerful new tool designed to enhance the efficiency and accuracy of security operations. By leveraging Large Language Models (LLMs) and natural language prompts, this assistant helps analysts make faster and more informed decisions when dealing with offenses all while being seamlessly integrated into the existing QRadar SIEM environment.

Key Benefits:

• Streamlined Security Tasks: The QRadar Investigation Assistant simplifies tasks like summarizing offenses, enabling analysts to spend less time on data review and more time responding to threats.

• Comprehensive Recommendations: The assistant provides both short-term remediation plans and long-term strategies to prevent future attacks.

• Focused Cybersecurity Expertise: Analysts can rely on the QRadar Investigation Assistant for context-aware insights specific to cybersecurity and QRadar, avoiding the distractions of generic AI assistants and ensuring accurate, relevant information without hallucinations.

With the QRadar Investigation Assistant, IBM is setting a new standard for security operations, making it simpler and smarter for analysts to tackle the landscape of cybersecurity threats. Stay tuned for more updates as we continue to innovate and enhance your QRadar experience through the power of AI!

Looking Forward

New Features Abound

As we continue to enhance QRadar, here are some upcoming features to look forward to over the coming quarters.

User Entity Behavior Analytics

UEBA uses machine learning to analyze user and entity activities, detecting insider threats by identifying unusual behavior patterns. It enhances traditional security measures by focusing on behavior-based insights rather than just rule-based correlations. Look for more information over the coming weeks regarding this new feature.

Designer Playbook

New Designer Playbook change logs allow Playbook Designers to answer the who, when, what, and why of playbook development, thereby speeding up delivery and troubleshooting of playbooks. “What’s New” logs enable production administrators to understand the use cases each playbook version supports, while unique version IDs facilitate more accurate problem reporting and troubleshooting of issues.

Low Code/No Code

A new low-code/no-code integrations framework will be available in the Playbook Designer UI, allowing users to build and deploy integrations in minutes with minimal or no coding required. This reduces the need for specialized skills, lowers maintenance overhead, and speeds up the delivery of automated workflows.

QRadar Events

Lets meet! Join our in-person events at a location near you, stream the event live, or log into a webinar where we have product leaders showcase our new product features, highlights and roadmap.

Upcoming Events