QRadar

Best Practices for Using the QRadar Tuning App

By Jose Bravo posted Tue March 12, 2019 06:00 AM

  
In this series of five short videos, I offer a demo of the various features of the QRadar Tuning App, now available for early access on the IBM Security App Exchange.

The QRadar Tuning App is now available for early access on the IBM Security App Exchange

Watch the full series to learn how to take best advantage of this fantastic new app, and share your own experiences in the comments section below.

Part One: The Most Active Rules


Part Two: The Rules that Dispatch the Most Events


Part Three: The Network Hierarchy


Part Four: Host Reference and Reference Sets


Part Five: Installation Script




#QRadar
1 comment
40 views

Permalink

Comments

14 days ago

Best App in 2019 so far!