IBM Security QRadar

 View Only

QRadar Use Case Manager 2.3 Released

By SHANE LUNDY posted Thu May 28, 2020 04:47 PM

  
QRadar.jpg
As you might already know, the QRadar Use Case Manager 2.3 has just been released to the IBM Security App Exchange. Click here to download directly. 

This update is bursting with lots of new features around Mitre and some general improvements to help you navigate your use cases in QRadar. 

For those of you not using the Use Case Manager, CHECK IT OUT. This is an essential tool for managing QRadar that every SOC team needs. 

Some of the highlights of the recent release are listed below.

Mitre Improvements:

  • New UI for adding Mitre Tactics & Techniques (Update Multiple at the same time).
  • New Mitre dropdown menu's for easier navigation.
  • New Mitre detection in real time, allowing you look at your environment and how it relates to Mitre for a period of time.
  • New Mitre Columns (Tactic ID, Technique ID, Mapping Source, Mapping Enabled) added to Use Case Manager allowing you to navigate and find Use Case details easier.
  • Switch the Mitre Matrix to view overall Use Cases coverage or filtered Use Cases coverage. Perfect if you are a MSSP and want to filter out per domain for example.
  • And for the more advanced users a full list of API's if required. 

General Improvements:

  • New Visualisation to see reference sets, custom properties or log sources in related rules or building blocks. 
  • Ability to create your own custom templates, create new or edit existing templates as required.
  • Use Case grouping, easily group common sets together to easily find what you are looking for. 
  • New Use Case Filtering (SNMP, Notes, Domains), helping you find exactly what you need. 

For those of you wanting to get a more detailed run through of all the features. Please watch the latest youtube videos on the features in UCM version 2.1, 2.2, 2.3

UCM (2.1, 2.2, 2.3) Mitre Improvements
https://youtu.be/I_q6KysKKhg
UCM (2.1, 2.2, 2.3) General Improvements
https://youtu.be/3A5rjnu8h8A
UCM 2.0 Highlights
https://ibm.co/2XtXGFq

Stay tuned and up to date with the latest releases of the Use Case Manager. We have exciting releases planned for Q3 & Q4

#QRadar
0 comments
32 views

Permalink