neonprimetime security , just trying to help

https://twitter.com/neonprimetime/status/1313222901236142080 Hey for all you #infosec friends stuck with #ibm #qradar just like me, just rem...

This is where you can find documentation on your qradar api's instance https://<your qradar url>/api_doc this tells you about ...

If you ever run into an issue where you go to the Qradar WinCollect tab and there is an agent successfully communicating, sending heartbeats...

If interested, I wrote a simple python script and saved it on github that queries the QRadar SIEM API for Offenses Assigned to a specific u...

I thought I'd share how I got the QRadar API working. I downloaded the sample API python modules (RestApiClient.py, SampleUtilities.py,...

In your SIEM here's how to setup a custom Right-Click menu for IP Address 1.) Open ip_context_menu.xml with an editor like 'nano...

Is your SIEM slow? Perhaps this command will help.      [xxx@yyy support]# ./findExpensiveCustomRules.sh      NOTE: This is typically fo...

Reference Maps allow you to query based off key-value pairs. An example of this would be if you have certain UserIds that are only allowed ...