One of the frequently asked questions that was placed to me during the last weeks was, "how to transfer QRadar custom rules from a test box to a production box"?
To mark this current concern, i want to share one of my apparent favorite secrets of qradar how to achieve this. It's just that easy!

Weiterlesen … Easy way to transfer QRadar custom rules from a test box to a production box

At the end of 2020 an odd issue in QRadar deployments occurred. The result of this defect is, that flow or/and event processing stops.
The details about this are described here...

Weiterlesen … Waiting for a valid license issue - important to know

During the course of my troubleshooting experience i had to be aware of some “utility changes” regarding to app extension management and monitoring.
According to the applied Release of QRadar and deployment scenario (AiO / Apphost as a managed host), you’ll have to keep in mind some improvements/changes of available “support utilities” or CLI commands.

Weiterlesen … QRadar App Management - Highlights