---
title: "IBM QRadar App for ThreatConnect User Guide | ThreatConnect"
slug: "ibm-qradar-app-for-threatconnect-user-guide"
description: "This article provides a PDF file of the IBM QRadar App for ThreatConnect User Guide."
updated: 2023-03-09T16:33:23Z
published: 2023-03-09T16:33:23Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# IBM QRadar App for ThreatConnect User Guide

The IBM® QRadar® App for ThreatConnect® is designed to upload Indicators from ThreatConnect to QRadar reference sets. Several filters are available to narrow the scope of Indicators retrieved from ThreatConnect, including Threat Rating, Confidence Rating, owner, Indicator type, and date of last modification. Once uploaded to QRadar, Indicators can be used to define filters and rules.

The QRadar integration operates in two modes: Indicator upload and Indicator deprecation. In Indicator upload, Indicators are uploaded to a QRadar reference set. In Indicator deprecation, Indicators are deleted from a QRadar reference set if they have been deprecated in ThreatConnect (i.e., they no longer meet the filtering criteria for the Job). Note that this configuration means that two Jobs need to be defined for every set of Indicators synced with QRadar.

This App operates in the ThreatConnect environment, with information flow running from ThreatConnect to QRadar. It is complementary to the ThreatConnect App for IBM QRadar, which operates in the QRadar environment, providing instant Indicator enrichment in QRadar from data in ThreatConnect and allowing users to look up and create Indicators or report false positives to ThreatConnect from within QRadar. See [*ThreatConnect App for IBM QRadar User Guide*](/v1/docs/threatconnect-app-for-ibm-qradar-user-guide) for more information.

[PDF document](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/IBM%20QRadar%20App%20for%20ThreatConnect%20User%20Guide_Software%20Version%203.0.pdf)

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc. IBM® and QRadar® are registered trademarks of the IBM Corporation.*

## Related

- [IBM QRadar](/ibm-qradar.md)
- [ThreatConnect App for IBM QRadar User Guide](/threatconnect-app-for-ibm-qradar-user-guide.md)

## Attachments

- [IBM QRadar App for ThreatConnect User Guide_Software Version 3.0.pdf](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/IBM QRadar App for ThreatConnect User Guide_Software Version 3.0.pdf)