Offense management

IBM® QRadar® reduces billions of events and flows into a manageable number of actionable offenses that are prioritized by their impact on your business operations. Use the Offenses tab to access all of the data that you need to understand even the most complex threats.

By providing immediate context for the offense, QRadar helps you to quickly identify which offenses are the most important, and to begin an investigation to find the source of the suspected security attack or policy breach.

Tip: You can also manage offenses using the IBM QRadar Analyst Workflow interface. For more information, see QRadar Analyst Workflow.

Restriction: You cannot manage offenses in IBM QRadar Log Manager. For more information about the differences between IBM QRadar SIEM and IBM QRadar Log Manager, see Capabilities in your IBM QRadar product.