List of Contributions

Marcos _

Contact Details

My Content

1 to 6 of 6 total
Posted By Marcos _ Mon September 21, 2020 09:50 AM
Found In Egroup: IBM Security QRadar
\ view thread
Hi Adi, Hi, if this is just an example, all I want to know is the kind of configuration I have to put when creating a rule so that the name of the event is always what I put in the name of the description, because I have some that do jump and others, no, I have all the same configured thank you ...
Posted By Marcos _ Mon September 21, 2020 06:13 AM
Found In Egroup: IBM Security QRadar
\ view thread
Good morning, I would like to know how to correctly set up an offense because when an offense is thrown at me it doesn't come out with the right name. I have changed the Rule Response/Dispatch New Event inside so that it jumps with the name but it appears with event names thanks note: see ...
Posted By Marcos _ Tue June 16, 2020 03:59 AM
Found In Egroup: IBM Security QRadar
\ view thread
Thank you very much for answering. But I've tried to try and I can't find a way to tell you in the api that it's always when the name offense jumps out. The way to automate it I know how to do it, but I search in the API for the curl code (example: curl -s -X POST -H 'Version: 11.0' -H 'Accept: ...
Posted By Marcos _ Mon June 15, 2020 11:50 AM
Found In Egroup: IBM Security QRadar
\ view thread
Well, I wanted to know, please, if it is possible to assign an offense to a user automatically every time the offense is launched. Maybe it could be done by API? If so, could you please tell me how? Thank you very much in advance. ------------------------------ Marcos _ ------------------ ...
Posted By Marcos _ Mon June 15, 2020 10:18 AM
Found In Egroup: IBM Security QRadar
\ view thread
Good afternoon, this topic interests me, please tell me how you assign a CRE to a user. My intention is that whenever I skip that kind of offesa, I always assign it to a specific user. Thank you ------------------------------ Marcos Gag ------------------------------
Posted By Marcos _ Wed May 06, 2020 08:19 AM
Found In Egroup: IBM Security QRadar
\ view thread
Good morning, before I introduce myself, my name is Mark and I wanted to ask you a question. When I do a portscan from qradar (more Options/information/portscan) attached capture, it is not possible for me to work the tool. Nmap is installed ok. However, when doing the same scan from SSH, through the ...