Offense actions

Use the QRadar Analyst Workflow to keep track of offenses throughout your investigation.

Knowing that an offense occurred is only the first step; identifying how it happened, where it happened, and who did it requires some investigation.