IBM QRadar

 View Only

  • 1.  Check IP Category on X-Force - Rule

    Posted Fri August 02, 2019 12:32 PM
    Hi,
    i see that i can make a rule to check the URL category on X-force with this condition:
    and when URL (custom) is categorized by X-Force as one of the following categories

    but i can't find the same condition to check the IP Category.

    Ho i can do this?

    Thanks.
    Mario

    ------------------------------
    Mario Capone
    ------------------------------


  • 2.  RE: Check IP Category on X-Force - Rule

    Posted Mon August 05, 2019 04:07 AM
    Search for "when this host property is categorized by X-Force as this category with confidence value equal to this amount".

    ------------------------------
    ANR21
    ------------------------------

    Original Message


  • 3.  RE: Check IP Category on X-Force - Rule

    Posted Tue August 06, 2019 02:40 AM
    Thanks it work fine!!
    Mario​

    ------------------------------
    Mario Capone
    ------------------------------

    Original Message