IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Use Case Manager App missing MITRE Attack Tactics

    Posted 06/01/22 12:29 PM

    I just wanted to add MITRE Attack categories to our UseCases and noticed that not all of them are present in the Use Case Manager App. Does anybody know why e.g. "Reconnaissance" is missing? Is there a way to add MITRE categories without the Use Case Manager App?

    Thank you!

    Stefan



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Use Case Manager App missing MITRE Attack Tactics

    Posted 06/08/22 01:13 PM

    Support Member

    To see all tactics and techniques, you would need to select all platforms. But default, we only select Windows, Linux and mac OS. "Reconnaissance" tactic belongs to PR platform, so you will see it when you enable that platform. You can access platform selections from preferences menu directly, or using the link in MITRE ATT&CK section of filters, or on top of ATT&CK coverage chart.



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Use Case Manager App missing MITRE Attack Tactics

    Posted 06/09/22 07:31 AM

    Great, that did the trick!


    Thank you :)



    #QRadar
    #Support
    #SupportMigration