IBM Security QRadar SIEM v7.4.3 (BYOL)

Product Overview

QRadar provides a unique approach to security analytics by chaining together related events to provide security teams with a single alert on each potential incident. This advanced correlation helps to reduce alert fatigue, streamline attack detection, and enable security analysts to respond to critical incidents faster. QRadar has free downloadable AWS content extensions that deliver catered security rules, reports, and reference sets to provide context and visibility into your AWS environment. It extends visibility to cloud platforms by collecting, normalizing and analyzing events. QRadar provides deep integrations with AWS to detect common cloud misconfigurations and potential threats.This image supports the following capabilitiesQRadar ConsoleQRadar App HostQRadar Event CollectorQRadar Event ProcessorQRadar Flow CollectorQRadar Flow ProcessorQRadar Event/Flow ProcessorQRadar Data NodeQRadar Network InsightsQRadar Data GatewayFor more information, visit https://www.ibm.com/qradar/security-qradar-siem.For customized QRadar SIEM pricing or if you are interested in complimentary product capabilities such as SOAR, NDR, Threat Intelligence, Data Explorer, or EDR - contact your IBM Sales Representative or email us at [email protected] recommends users update their software and maintain the most current version. For more information about upgrading, please see the QRadar SIEM documentation
Version: IBM Security QRadar SIEM v7.4.3 (BYOL)
By
IBM Security
Categories: Security
Network Infrastructure
Log Analysis

Operating System
Linux/Unix, Red Hat Enterprise Linux RHEL-7.7
Delivery Methods
Amazon Machine Image

Highlights: Gain centralized visibility across AWS and hybrid cloud environments via a single pane of glass. Leverage deep integrations with AWS security services Ingests vast amounts of data from on-premises and cloud sources and apply built-in analytics to accurately detect and prioritize threats. Correlate data across users, networks, and AWS native services to gain deep insights into key threats including cloud misconfigurations, policy changes and suspicious user activity.

Category: Infrastructure Software

Delivery Method: Amazon Machine Image