Data collection
IBM QRadar accepts information in various formats and from a wide range of devices, including security events, network traffic, and scan results.
Collected data is categorized into three major sections: events, flows, and vulnerability assessment (VA) information.