IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  UBA - export usernames

    Posted 01/29/21 06:08 PM
    Hello, 
    is't possible to "export" the list of usernames  directly from the app UBA ?  

    Thx


    ------------------------------
    DK
    ------------------------------


  • 2.  RE: UBA - export usernames

    Posted 02/03/21 06:00 PM
    Hello,

    what's your point in doing that?

    Regards,
    Ralph

    ------------------------------
    Ralph Belfiore
    IT Security Senior Consulting
    pro4bizz GmbH
    Karlsruhe
    +49 721 90981720
    ------------------------------



  • 3.  RE: UBA - export usernames

    Posted 02/04/21 03:31 AM
    Hi,
    the basic idea is use the all of usernames for security reporting and for validation in other security tools. 


    ------------------------------
    Dušan Krása
    ------------------------------



  • 4.  RE: UBA - export usernames

    Posted 02/04/21 05:16 AM
    Hi,

    the approach of using User Analytics for my understandig is the other way around. You feed UBA with your known Identities to match them with the detected usernames from flow or log related usernames to improve detecting user anomalies you are not knowing.
    In general it is a good question, but i'm still thinking about the value of having the possibility to export the usernames from UBA...

    Regards,
    Ralph

    ------------------------------
    Ralph Belfiore
    IT Security Senior Consulting
    pro4bizz GmbH
    Karlsruhe
    +49 721 90981720
    ------------------------------