What do you like most about IBM QRadar User Behavior Analytics?
Thanks for sharing your thoughts with the community!
Integration is very easy and the reporting is good.
It provides many options for searching. I can see devices from different vendors, like Cisco, in one interface, which is good for me.
The feature that I find the most useful is that IBM QRadar User Behavior Analytics is free of charge. It's a fully free product that can be installed on top of IBM QRadar SIEM.
I really like the feature we have with the logs, that if there are any credit card numbers being used, like a PII, you can just use rejects and you can mask it. This is a really good feature in QRadar.
It has a powerful GUI where you can put together your use cases, and don't have to write your own scripts.
QRadar shows very effective correlations. If you combine all the logins plus user behavior and the current intelligence, it gives a very good correlation for business. I think it reduces the false positives in user activity monitoring because there is a lot of social information to correlate with other data.
In terms of the most valuable features, the log collections and log processing mechanisms are good. They have good dashboards.
Most of the features are good. It is an excellent solution.
How do you or your organization use this solution?
Please share with us so that your peers can learn from your experiences.