In IBM® QRadar® you can investigate offenses to determine the root cause of a network issue.

Use the Offenses tab to view all the offenses that occur on your network and complete the following tasks:

  • Investigate offenses, source and destination IP addresses, network behaviors, and anomalies on your network.
  • Correlate events and flows that are sourced from multiple networks to the same destination IP address.
  • Go to the various pages of the Offenses tab to investigate event and flow details.
  • Determine the unique events that caused an offense.

For more information, see Offense management.