ThreatConnect App for IBM QRadar User Guide

The ThreatConnect^® App for IBM^® QRadar^® aggregates logs from IBM QRadar and combines them with threat intelligence in the ThreatConnect platform, enabling instant Indicator enrichment in QRadar from data in ThreatConnect and allowing users to look up and create Indicators or report false positives to ThreatConnect from within QRadar. It is built on the QRadar GUI app framework and can be installed directly from within the IBM Security App Exchange. General information about the app can be found at https://exchange.xforce.ibmcloud.com/hub/extension/bd7c346432082b104374eba1391837de.

This App operates in the QRadar environment, with information flow running from QRadar to ThreatConnect. It is complementary to the IBM QRadar App for ThreatConnect, which operates in the ThreatConnect environment, uploading Indicators from ThreatConnect to QRadar reference sets. See IBM QRadar App for ThreatConnect User Guide for more information.

Software Version 2.0 has identical functionality to Software Version 1.0, but has been revised to function with Python^® 3 and the updated QRadar application environment.

  

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.
IBM^® and QRadar^® are registered trademarks of the IBM Corporation.
Python^® is a registered trademark of the Python Software Foundation.