We have just released two new educational QRadar hands-on labs on the IBM Security Learning Academy, which allow you to spend up to four hours using the newest QRadar 7.3.1 release to work through some lab exercises:
- Introduction to Custom Action Scripts
Attach scripts to custom rules to do specific actions in response to network events. Use the Custom Action window to manage custom action scripts. Use custom actions to select or define the value that is passed to the script and the resulting action.
In this self-paced course, you will be introduced into the foundations of the custom action scripts, their components and learn how they are managed within QRadar.
- Creating Reports in QRadar SIEM
IBM QRadar SIEM Reports condense data to statistical views on your environment for various purposes, in particular to meet compliance requirements. In QRadar, you can use default reports or create custom reports. QRadar SIEM provides default report templates that you can customize, rebrand, and distribute to QRadar SIEM users.
In this lab, you run an a report from an existing template, then create a new report based on a saved search, and finally create a new report from a new search.
------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------