Resolution1 CyberSecurity
Resolution1 CyberSecurity is formerly known as AccessData InSight. The Resolution1 CyberSecurity DSM for IBM QRadar collects event logs from your Resolution1 CyberSecurity device.
The following table identifies the specifications for the Resolution1 CyberSecurity
DSM:
Specification | Value |
---|---|
Manufacturer | Resolution1 |
DSM name | Resolution1 CyberSecurity |
RPM file name | DSM-Resolution1CyberSecurity-Qradar_version-build_number.noarch.rpm |
Supported versions | V2 |
Event format | Log file |
QRadar recorded event types |
Volatile Data Memory Analysis Data Memory Acquisition Data Collection Data Software Inventory Process Dump Data Threat Scan Data Agent Remediation Data |
Automatically discovered? | No |
Included identity? | No |
To send events from Resolution1 CyberSecurity to QRadar, use the following steps:
- If automatic updates are not enabled, download the most recent versions of the following RPMs
from the IBM® Support Website.
- LogFileProtocol
- DSMCommon
- Resolution1 CyberSecurity DSM
- Configure your Resolution1 CyberSecurity device to communicate with QRadar.
- Create a Resolution1 CyberSecurity log source on the QRadar Console.