QRadar EDR: Administering Your Environment
Threat Management · Security

Course Overview
Learn how to configure, administer, and maintain your QRadar EDR deployment.
When deploying IBM Security® QRadar® EDR into production, you must configure important details, such as notifications, alerts, and policies. After QRadar EDR is deployed successfully, you must set up your users, groups, and clients, configure your Hive-Cloud score, and define how to handle downloaded and quarantined files from endpoints. Another important maintenance task revolves around monitoring audit logs.
This course applies to version 3.12 of the on-premises QRadar EDR offering as well as the January 2024 SaaS-based offering.
Who Should Attend
Security Operations Center (SOC) Administrator SOC Analyst Security Analyst Incident Responder Managed Service Security Provider (MSSP)
See these courses too
Follow-on and supporting courses for this path.
- Next stepBQ205G
IBM QRadar SIEM Advanced Topics
Advanced
- RelatedBQ105G
IBM QRadar SIEM Foundations
Intermediate
- RelatedBQ310G
QRadar SIEM: Gathering Threat Management Data (v7.5)
Intermediate
- RelatedBQ505G
QRadar EDR: Foundations
Basic
IBM Training FAQs
Is CRS an IBM Authorized Training Delivery Partner?
Yes. CRS (Cyber Retaliator Solutions) is an IBM Authorized Training Delivery Partner, delivering 430+ IBM courses across South Africa, Nigeria, Kenya, Ghana, and 20+ other African countries, as well as North America. All IBM training delivered by CRS carries full IBM authorization.
What delivery formats are available for IBM training?
CRS delivers IBM training via Instructor-Led Online (virtual classroom), Instructor-Led On-site (at your premises or a CRS training facility), and Self-Paced Online formats. Custom corporate schedules and group bookings are available across all formats.
Are IBM digital badges included with course completion?
Many IBM courses include a Credly digital badge upon successful completion, which can be shared on LinkedIn and professional profiles. Badge availability is indicated on each course page where applicable.
Does CRS deliver IBM training outside South Africa?
Yes. CRS delivers IBM training across 28+ countries including South Africa, Nigeria, Kenya, Ghana, Uganda, Zimbabwe, USA, Canada, and Singapore. Instructor-led online delivery makes any IBM course accessible from any location.
Can I book this IBM course for a group or corporate team?
Yes. CRS accepts group and corporate bookings for all IBM courses. Groups of 5 or more delegates may qualify for custom scheduling, on-site delivery, and volume terms. Use the booking form above or the large group upload form to submit your requirements.
Course Details
- Course Code
- BQ520XG
- Level
- Intermediate
- Duration
- 2 hours
- Brand
- Threat Management
- Category
- Security
Ready to Book?
Contact our IBM-certified training team for availability, group rates, and scheduling.
Download Course Outlineinfo@cyberretaliatorsolutions.comSee these courses too
Follow-on and supporting courses for this path.
- Next stepBQ205G
IBM QRadar SIEM Advanced Topics
Advanced
- RelatedBQ105G
IBM QRadar SIEM Foundations
Intermediate
- RelatedBQ310G
QRadar SIEM: Gathering Threat Management Data (v7.5)
Intermediate
- RelatedBQ505G
QRadar EDR: Foundations
Basic

CRS is an IBM Authorized Training Delivery Partner