Flow property integration with X-Force Exchange

Some flow properties in QRadar Network Insights are integrated with IBM X-Force Exchange to help you quickly determine whether the value requires further investigation.

On the Flow Information window, the following properties include links that you can click to open X-Force Exchange:
  • TLS Server Name Indication
  • HTTP Host
  • DNS Domain Name
  • File Hash
  • MD5 File Hash
  • SHA1 File Hash
  • SHA256 File Hash
  • Suspect content descriptions that come from the IBM X-Force signature library.
The following image shows some of the flow properties that are integrated with X-Force Exchange.