IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Integrating Darktrace with Qradar

    Posted 07/15/19 03:52 PM
    Hi
    Has someone integrated Darktrace with Qradar? 
    I readed in the products page of Darktrace that it can be integrated to Qradar throught a connector in the LEEF format but i don't find any information about how to do it.
    Thanks.

    ------------------------------
    Johan López
    ------------------------------


  • 2.  RE: Integrating Darktrace with Qradar

    Posted 07/16/19 10:48 AM
    Edited by Ian Lewis 07/17/19 10:32 AM
    It is very easy to do so, but it is only for DarkTrace "alerts". Just need to tell DT about the syslog server and format. They don't share their admin guides, you need to download them from the support portal. 
    ------Original Message------

    Hi
    Has someone integrated Darktrace with Qradar? 
    I readed in the products page of Darktrace that it can be integrated to Qradar throught a connector in the LEEF format but i don't find any information about how to do it.
    Thanks.

    ------------------------------
    Johan López
    ------------------------------


  • 3.  RE: Integrating Darktrace with Qradar

    Posted 08/08/19 05:00 AM
    Hi, Can confirm same as what Ian said below as we had to do the same process for a customer. Download all the info from the support portal.

    ------------------------------
    Adam Jones
    ------------------------------



Related Content