IBM Security QRadar

 View Only
  • 1.  UBA - export usernames

    Posted Fri January 29, 2021 06:08 PM
    Hello, 
    is't possible to "export" the list of usernames  directly from the app UBA ?  

    Thx


    ------------------------------
    DK
    ------------------------------


  • 2.  RE: UBA - export usernames

    IBM Champion
    Posted Wed February 03, 2021 06:00 PM
    Hello,

    what's your point in doing that?

    Regards,
    Ralph

    ------------------------------
    Ralph Belfiore
    IT Security Senior Consulting
    pro4bizz GmbH
    Karlsruhe
    +49 721 90981720
    ------------------------------



  • 3.  RE: UBA - export usernames

    Posted Thu February 04, 2021 03:31 AM
    Hi,
    the basic idea is use the all of usernames for security reporting and for validation in other security tools. 


    ------------------------------
    Dušan Krása
    ------------------------------



  • 4.  RE: UBA - export usernames

    IBM Champion
    Posted Thu February 04, 2021 05:16 AM
    Hi,

    the approach of using User Analytics for my understandig is the other way around. You feed UBA with your known Identities to match them with the detected usernames from flow or log related usernames to improve detecting user anomalies you are not knowing.
    In general it is a good question, but i'm still thinking about the value of having the possibility to export the usernames from UBA...

    Regards,
    Ralph

    ------------------------------
    Ralph Belfiore
    IT Security Senior Consulting
    pro4bizz GmbH
    Karlsruhe
    +49 721 90981720
    ------------------------------