Beyond SIEM: Collaborative Threat Defense with IBM's QRadar and App Exchange

No ratings

Presented at AtlSecCon 2016 by

Rory Bray

Jason Keirstead

Criminals and other bad actors organize and collaborate by sharing information, tools and resources. Our security analysts and responders must also leverage common tools, frameworks and openly collaborate on defensive strategies and evolve security infrastructure. Point solutions must integrated into a defensive whole, threat intelligence and other information must be shared rapidly and workflows or use cases for detection and response must be shared easily. IBM Security has invested heavily in the creation of a collaborative security analytics ecosystem to bring all these facets together in a powerful, extensible, platform that fosters this sharing and open cooperation. Learn how anyone can contribute to or extend the QRadar Security Intelligence platform and then package the contribution to share with all QRadar users.