Category
SOAR
Purpose
Collection
Built for
Internal IR teams
Required version
Team or Team Enterprise
What is IBM QRadar SOAR?
IBM QRadar SOAR maximizes your security tools by integrating with them, guides your team through the incident response process with playbooks, and leverages automation to reduce repetitive tasks.
Integration actions
IBM QRadar SOAR can remotely launch collections.
Whom is it built for?
Internal IR teams.
Why is it useful?
This integration allows you to start Cyber Triage investigations on endpoints via your IBM Security SOAR workflow. This automates the incident response process so you can quickly determine if an endpoint is compromised or not.
Where is it used?
IBM QRadar SOAR can launch a Cyber Triage investigation. It maximizes your security tools and helps guide your team through the incident response process. The tool is used to help accelerate incident response by improving the management of compliance notification requirements.
What is the required Cyber Triage version?
Team or Team Enterprise.
Additional links
*For more information about this integration, contact our sales team: sales@cybertriage.com