Item: IBM Security QRadar SOAR
Rating: 7
Author: Verified User

Use Cases and Deployment Scope

We use IBM Security QRadar SOAR as our primary SIEM tool. We injust logs from various other system and tools to gather intelligence and custom alerting. We use an MSSP service to leverage this data for threat intelligence and hunting.

Pros and Cons

Lots of data sources able to injest
Customizable alerting
Threat hunting

Not great reports.
Context around some built in alerting
Slow interface

Most Important Features

Custom alerts
Options for log data

Return on Investment

Incident response

Alternatives Considered

Rapid7 InsightIDR

Better log sourcing

Key Insights

Do you think IBM Security QRadar SOAR delivers good value for the price?

Yes

Are you happy with IBM Security QRadar SOAR's feature set?

Yes

Did IBM Security QRadar SOAR live up to sales and marketing promises?

Yes

Did implementation of IBM Security QRadar SOAR go as expected?

Yes

Would you buy IBM Security QRadar SOAR again?

Yes

Other Software Used

Rapid7 InsightVM, Cisco Secure Endpoint, StealthAUDIT

Likelihood to Recommend

I think it is great for monitoring log source across environment. Good for threat hunting and alerting. Good to leverage data for MSSP services.

Good SIEM

Overall Satisfaction with IBM Security QRadar SOAR