QRadar EDR: Integrating QRadar EDR with QRadar SIEM

Course overview

Learn how to integrate your QRadar EDR deployment with QRadar SIEM.

Gain knowledge on how to integrate IBM Security® QRadar® EDR and SIEM by creating an API application in QRadar EDR and by adding a new log source in QRadar SIEM to add endpoint detection and alerts to QRadar SIEM. Having advanced and automated response capabilities enables analysts to focus on the fight in front of them.

This course applies to version 3.12 of the on-premises QRadar EDR offering.

Who should attend

This course is tailored to IT security analysts in a Security Operations Center (SOC) environment who are tasked with endpoint protection and threat hunting, as well as QRadar EDR administrators, incident responders, and managed service security providers (MSSP).

Delivery formats

• • Instructor-led online (virtual classroom)
• • Instructor-led on-site at your premises
• • Self-paced online training
• • Private/closed group delivery for corporate teams

Related and follow-on courses

• BQ105G — IBM QRadar SIEM Foundations (Intermediate)
• BQ205G — IBM QRadar SIEM Advanced Topics (Advanced)
• BQ310G — QRadar SIEM: Gathering Threat Management Data (v7.5) (Intermediate)
• BQ505G — QRadar EDR: Foundations (Basic)