IBM QRadar EDR Reviews & Product Details

For me, It Has the Best Options For Security and Firewall based servers. As i needed to secure our client's data, which is really important and was saved on cloud-based servers, it worked best for me. Review collected by and hosted on G2.com.

I don't particularly hate anything it has, but its need or large amount of resources to work appropriately is its downside; you can say that looking at it collecting data and reporting things, it is reasonable. Review collected by and hosted on G2.com.

I didn't use it for over a year but liked its logs-creating function. While it also collects data from different endpoints while creating logs, it helped me a lot in keeping account of many things. Review collected by and hosted on G2.com.

Well, while I was not the admin, I was its user, and I was doing a remote job and didn't have a very high-end pc, but it needed a lot of resources for it to handle the workload effectively. Review collected by and hosted on G2.com.

I appreciate IBM's advanced threat detection capabilities with rules, anomaly detection and behavior analytics that can identify potential threats and notify us in time. Review collected by and hosted on G2.com.

One downside is the complexity of deploying it. If you are not a skilled and knowledgeable person with SEIM technologies, then I would recommend getting one to do it because after its setup, you will also have problems maintaining it. Review collected by and hosted on G2.com.

It's GUI is very user friendly and monitoring is very easy. You can search any event by using different filters. QRadar support multiple extensions that can help you to manage things like log source management, User Behavior Analysis and QDI for QRadar server health status. Review collected by and hosted on G2.com.

Being professional I am not liking the User Behavior Analytics app in QRadar because it's very difficult to understand for a layman. Network flows monitoring is little bit difficult. Review collected by and hosted on G2.com.

Can help companies protect their critical data and assets from being compromised by cybercriminals. This makes it possible to detect new and emerging threats that may not have been seen before. Review collected by and hosted on G2.com.

May be too complex for some users to understand and use effectively. Its interface and features can be overwhelming, especially for non-technical users. Expensive for small businesses or individuals who don't have a large budget for cybersecurity solutions. Review collected by and hosted on G2.com.

Endpoint visibility and investigation: The solution provides deep visibility into endpoint activities, allowing security teams to gain insights into the behaviors of individual endpoints Review collected by and hosted on G2.com.

Implementing and managing an EDR solution like IBM Security QRadar EDR may require a certain level of expertise and familiarity with security operations. Organizations without dedicated security teams or limited resources might find it challenging to fully utilize the solution's capabilities. Review collected by and hosted on G2.com.

The most accurate and up-to-date information, I recommend visiting the official IBM Security QRadar EDR documentation or consulting with IBM representatives. Review collected by and hosted on G2.com.

Considerations may vary depending on the specific requirements, infrastructure, and preferences of different organizations. Review collected by and hosted on G2.com.

I appreciate IBM Security QRadar EDR's ability to detect and respond to advanced threats, its threat hunting and incident response capabilities, its automation of response and remediation actions, and its real-time visibility into endpoint activity. These features can help security teams detect and respond to threats quickly and effectively, improving the overall security posture of an organization. Review collected by and hosted on G2.com.

the complexity of implementation and management, the cost of licensing and maintenance, or the need for adequate resources to effectively leverage its capabilities. Review collected by and hosted on G2.com.

Simplified security analyst experience.

Reduce the learning curve of the SOC team.

Best SOC Automation Process. Review collected by and hosted on G2.com.

Sensor visibility are all disabled

Telemetry level is only standard. Review collected by and hosted on G2.com.

We are using the QRadar as logging from server to Kenna. Installation of it is too easy and it doesn't need more computer source. Review collected by and hosted on G2.com.

It doesn't have a local monitoring screen Review collected by and hosted on G2.com.