Offense management
IBM®
QRadar® reduces
billions of events and flows into a manageable number of actionable offenses that are prioritized by
their impact on your business operations. Use the Offenses tab to access all
of the data that you need to understand even the most complex threats.
By providing immediate context for the offense, QRadar helps you to quickly
identify which offenses are the most important, and to begin an investigation to find the source of
the suspected security attack or policy breach.
Tip: You can also manage offenses using
the IBM
QRadar Analyst Workflow
interface. For more information, see QRadar Analyst Workflow.
Restriction: You cannot manage offenses in IBM
QRadar Log Manager. For more
information about the differences between IBM
QRadar SIEM and IBM
QRadar Log Manager, see Capabilities in your IBM QRadar product.