Item: IBM Security QRadar EDR
Rating: 8
Author: Verified User

Use Cases and Deployment Scope

We use it as a SIEM logs tool. The alerts are human readable. There is a cyber assistant that can help you if needed and also you have plenty of options to customize it to feed your organizations needs. The endpoints are exposed a lot and with them the network of the customer is exposed so this tool help us keep everything monitored

Pros and Cons

automatic alert management
customizable detection strategy
rassomware detection

Return on Investment

security alerts are being monitored now by the service desk team, so security team dont need to check false-positive alerts

Easy Tasks

scripting custom detection

Automation

The AI can be switched on to manage your system by handling alerts and reducing 90% false positive. We tend to use the AI and our service desk to check the alerts, so that something is not missed.

Key Insights

Do you think IBM Security QRadar EDR delivers good value for the price?

Yes

Are you happy with IBM Security QRadar EDR's feature set?

Yes

Did IBM Security QRadar EDR live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of IBM Security QRadar EDR go as expected?

Yes

Would you buy IBM Security QRadar EDR again?

Yes

Other Software Used

Rubrik, LogicMonitor, Druva Data Resiliency Cloud

Likelihood to Recommend

It helps our service desk to be active in monitoring alerts. The alerts are human readable, easy to identify what is happening and it can be set up to detect all alerts you/your organization needs. The UI can be modernized/updated, but that is the only thing. Ransomware detection is good as well

IBM Security QRadar EDR good SIEM tool

Overall Satisfaction with IBM Security QRadar EDR