QRadar Incident Forensics software installations on your own appliance

To ensure a successful installation of IBM® QRadar® Incident Forensics on your own appliance, you must install the Red Hat® Enterprise Linux® operating system, the QRadar Console, and QRadar Incident Forensics managed host.

For new software installations that integrate QRadar Incident Forensics with IBM QRadar, you install two ISO files:
  • QRadar ISO image

    A single ISO is used to install every QRadar product except for QRadar Incident Forensics and IBM QRadar Network Insights. The activation key that you enter determines the QRadar appliance type that is installed.

  • QRadar Incident Forensics ISO image

    This ISO image contains the QRadar Incident Forensics Processor and the QRadar Incident Forensics Standalone. You must install the QRadar Incident Forensics Processor.