QRadar EDR: Administering Your Environment
Code: BQ520XG-SPVCOverview
When deploying IBM Security® QRadar® EDR into production, you must configure important details, such as notifications, alerts, and policies. After QRadar EDR is deployed successfully, you must set up your users, groups, and clients, configure your Hive-Cloud score, and define how to handle downloaded and quarantined files from endpoints. Another important maintenance task revolves around monitoring audit logs.
This course applies to version 3.12 of the on-premises QRadar EDR offering as well as the January 2024 SaaS-based offering.
Audience
Security Operations Center (SOC) Administrator
SOC Analyst
Security Analyst
Incident Responder
Managed Service Security Provider (MSSP)
Prerequisites
nullObjective
- Configuring notifications and Simple Mail Transfer Protocol (SMTP)
- Setting up forwarding alerts
- Defining policies
- Handling downloaded and quarantined files from your endpoints
- Setting up users, groups, and clients
- Configuring Hive-Cloud Score
- Creating applications
- Monitoring audit logs
Course Outline
- Configuring tools
- Managing the environment
- Reviewing downloads and audit logs
- Detections Strategies (DeStras) lab
- Agent installation lab
Price (ex. VAT)
Duration
Schedule
Please send us a message with the form below
Delivery methods
- Classroom
- On-site (at your location)
- Virtual (instructor online)
Inquire
We will contact you to discuss your requirements