Qradar SIEM: How to keep network hierarchy updated?

IBM Qradar security intelligence platform provides many features to keep track of network systems and logs flows. Network hierarchy modules comes with interesting features especially grouping network systems and organize your networks logically by business unit, common behaviour or any other common attributes in the network solves many struggles of SOC Admin team.

For example, All network IP’s of finance related can be grouped together.

To keep getting valuable insights from Qradar, There is a pre-condition that you need to make sure Qradar network hierarchy is up-to-date. Below Quick video shows multiple ways to keep network hierarchy updated.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.