Downloading files from the QRadar EDR Brain to your workstation

When you analyze an alert or an event, you might need to download a file from the QRadar® EDR Brain to your workstation for testing.


  1. Click Administration > Downloads.
  2. Click a file in the list.
  3. On the Requests tab, choose one of the following options.
    • Click Preview File to view the file in different encoding formats such as ASCII, HEX, UTF-8, or UTF-16. If readable content is displayed, you copy the content to a new file or document for offline review.
    • Click Download File to download the file to your workstation.