What I like the best in IBM Security Qradar EDR is their threat hunting capabilities which provides a proactive approach of finding suspicious IOC and anomalies within the environment together with their IR Automation which connects strings workflows and orchestrate playbooks and response actions to real time againts real time threats. Review collected by and hosted on G2.com.

What I dislike about the platform is the alert overload in which this happens when there is a surge or high volume alerts/incidents which could affect security analyst and their triage actions in responding to multiple events. Review collected by and hosted on G2.com.

The QRadar EDR is one of my personal favorite EDR. As SOC Analyst I'm always receiving logs from QRadar EDR and many of our clients use it as their EDR. The main thing I love about QRadar's EDR is the Dashboards, which provide a very user-friendly dashboard as their home dashboard where we can see stats of all of our endpoints in a less complicated way. Also, the behavioral tree is next level, helping us in incident response very well and it is easy to integrate with SIEM software. Review collected by and hosted on G2.com.

It requires some programming knowledge to develop use cases. Review collected by and hosted on G2.com.

I like the Dashboard and the way it presents the overall incident details. It has the capability to detect malicious behavior, is easy to manage the policies, and add exceptions. Review collected by and hosted on G2.com.

I feel it's a little bit slow sometimes while opening incident details. It can be fixed, I think, in future versions. Review collected by and hosted on G2.com.

Alert analysis is nice, showing the process tree and information about each block. It's really easy to setup and integrate with QRadar SIEM and SOAR. Review collected by and hosted on G2.com.

Needs programming knowledge to build your own rules. Reports needs to be improved. Many false positives. Review collected by and hosted on G2.com.

The device detects all endpoint threats and has a great realtime alert system.

The main good thing is that it has a very great user interface.

It was really easy to use it from the start itself

That sets it apart from other vendors Review collected by and hosted on G2.com.

For real time attack prevention we need to update it regularly,that was one of the disadvantages

The cost might be bit too high for small organisations Review collected by and hosted on G2.com.

Features advanced analytics with threat intelligence detection even against zero-day exploits QRadar automated remediation helps cyber security team to predefine rules and policies to take proactive response against threats efficiently. It seamlessly integrates with existing systems, ingest security data and analyse in real time with prompt alerts and mitigation actions. Review collected by and hosted on G2.com.

Initial setup & configuring QRadar EDR can be complex, requires expertise from both endpoint security and SIEM technologies. EDR have additional Licensing cost which might not be suitable for small enterprise organization. Like any other security solution QRadar may generate false positives which needs to be manually investigated by the team at times. Review collected by and hosted on G2.com.

1) Best techniques to use are available like MITRE ATT&CK, visualizations, AI tools automation.

2) Good Customer Support.

3) Helps to detect malicious endpoint threat and mitigate them in real time. Review collected by and hosted on G2.com.

1) Sometimes false positives may arise and it needs a certain level of expertise to use.

2) Cost is high for mid-small size organizations. Review collected by and hosted on G2.com.

Great security tool for endpoint threat detection. Regular updates to secure malicious threat attacks. IBM Security QRadar is a great tool for detecting malicious phishing emails. Review collected by and hosted on G2.com.

Initial setup is bit tricky. Tool is costly for mid range and small business. Review collected by and hosted on G2.com.

The best part is user interface and it's continuous update to secure from malicious threat. Review collected by and hosted on G2.com.

Cost is high and sometimes it's shows false positive Review collected by and hosted on G2.com.

Easy to understand and use, Implementing it with other security products is reliable. Detects known and unknown threats. Review collected by and hosted on G2.com.

Not feasible to understand all the features in short duration. Review collected by and hosted on G2.com.