IBM Security QRadar

 View Only
Expand all | Collapse all

How to Extract Usernames Detected by UBA

  • 1.  How to Extract Usernames Detected by UBA

    Posted Thu April 15, 2021 09:04 AM
    Hi Team,

    In our environment UBA has detected unexpected number of usernames which we need to review but I am not able to find any option to extract these usernames.

    We need to extract these usernames and provide it to customer for review.

    Please assist how we can extract these usernames from UBA?

    Thanks,
    Mohd

    ------------------------------
    Mohd Danish
    ------------------------------


  • 2.  RE: How to Extract Usernames Detected by UBA

    Posted Wed April 21, 2021 09:25 AM
    Hey Mohd!

    Can you share a screenshot of where do you see those usernames?
    I would assume they will be populated in one of the UBA reference sets.

    ------------------------------
    Daniel Koifman
    ------------------------------