QRadar EDR: Integrating QRadar EDR with QRadar SIEM

Unit 1: Integrating with QRadar SIEM

• Configure an API application in QRadar EDR
• Install a new log source in QRadar SIEM
• Configure the correct protocol for a log source in QRadar SIEM
• Analyze endpoint alerts from the SIEM dashboard using data from EDR

Unit 2: QRadar EDR - integrating with QRadar SIEM - Lab

• Exercise 1 - Configuring QRadar EDR and QRadar SIEM integration
• Exercise 2 - BitTorrent is run on an endpoint 
• Exercise 3 – Malware detected (tryme.exe)

This course is tailored to IT security analysts in a Security Operations Center (SOC) environment who are tasked with endpoint protection and threat hunting, as well as QRadar EDR administrators, incident responders, and managed service security providers (MSSP).

• Configure an API application in QRadar EDR
• Install a new log source in QRadar SIEM
• Install the correct protocol for a log source in QRadar SIEM
• Analyze endpoint alerts from the SIEM dashboard using data from EDR