Incident Detection and Investigation with QRadar Apps

QRadar's major feature is the ability for users to install apps. This expands the SIEM capabilities and aids in incident investigation. This course, Incident Detection and Investigation using QRadar Apps will teach you about the best QRadar apps that can be used by SOC analysts. You will first learn how to create interactive dashboards using the Pulse app. The QRadar Advisor and Watson app will then teach you how artificial intelligence can be used to investigate incidents. You will also learn how to detect internal threats with the User Behaviour Analytics app. Other apps will also be explored that can help you monitor the health of your QRadar system. Demos of QRadar apps in action during incident investigations include malware outbreaks, rouge employees and internal threats. This course will equip you with the knowledge and skills to enhance your incident investigation abilities.