What are the components of IBM QRadar?

SIEM

• QRadar SIEM is an industry-leading security information and event management solution that is the base platform of the IBM QRadar family.  An integrated security platform, QRadar SIEM provides real-time security analytics, insights, and actions across hybrid IT environments.  QRadar continuously detects and responds to cyber threats security incidents using artificial intelligence and machine learning.

User Behavior Analytics

• QRadar User Behavior Analytics is a powerful and intuitive data discovery platform that helps security analysts find the needle in the haystack of malicious activity. Unlike traditional security tools, QRadar User Behavior Analytics offers many ways to visualize and navigate the data so you can find the most important signals and prioritize your response. QRadar User Behavior Analytics is also integrated with other data sources so that you can build a deeper and more complete picture of your threat landscape.

Network Insights

• QRadar Network Insights is an end-to-end platform for advanced threat hunting, delivering the context, relationships, and history needed to find and identify advanced threats. Leveraging billions of events from across the network provides the necessary intelligence and context to identify advanced attacks, detect advanced adversary behavior, and predict advanced threats.

Vulnerability Manager

• QRadar Vulnerability Manager automates the discovery, assessment, and prioritization of vulnerabilities to ensure the highest likelihood of a successful exploit avoidance and compliance strategy. The Vulnerability Manager is a powerful security tool that can search for and identify vulnerabilities in your environment and prioritize the risk associated with each.

Incident Forensics

• QRadar Incident Forensics is a powerful analytical tool that enables you to gain actionable intelligence from your data. It uses machine learning algorithms to identify the source and nature of an incident and predict and minimize the impact of a given attack. QIF empowers you to detect advanced threats and analyze data much faster than ever before.