Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Building a Next-Gen SOC with IBM QRadar
Building a Next-Gen SOC with IBM QRadar

Building a Next-Gen SOC with IBM QRadar: Accelerate your security operations and detect cyber threats effectively

Arrow left icon
Profile Icon Ashish Kothekar
Arrow right icon
$12.99 per month
Full star icon Full star icon Full star icon Full star icon Half star icon 4.8 (12 Ratings)
Paperback Jun 2023 198 pages 1st Edition
eBook
$35.99
Paperback
$44.99
Subscription
Free Trial
Renews at $12.99p/m
Arrow left icon
Profile Icon Ashish Kothekar
Arrow right icon
$12.99 per month
Full star icon Full star icon Full star icon Full star icon Half star icon 4.8 (12 Ratings)
Paperback Jun 2023 198 pages 1st Edition
eBook
$35.99
Paperback
$44.99
Subscription
Free Trial
Renews at $12.99p/m
eBook
$35.99
Paperback
$44.99
Subscription
Free Trial
Renews at $12.99p/m

What do you get with a Packt Subscription?

Free for first 7 days. $15.99 p/m after that. Cancel any time!
Product feature icon Unlimited ad-free access to the largest independent learning library in tech. Access this title and thousands more!
Product feature icon 50+ new titles added per month, including many first-to-market concepts and exclusive early access to books as they are being written.
Product feature icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Product feature icon Thousands of reference materials covering every tech concept you need to stay up to date.
Subscribe now
View plans & pricing

Key benefits

  • Get to grips with QRadar architecture, components, features, and deployments
  • Utilize IBM QRadar SIEM to respond to network threats in real time
  • Learn how to integrate AI into threat management by using QRadar with Watson

Description

This comprehensive guide to QRadar will help you build an efficient security operations center (SOC) for threat hunting and need-to-know software updates, as well as understand compliance and reporting and how IBM QRadar stores network data in real time. The book begins with a quick introduction to QRadar components and architecture, teaching you the different ways of deploying QRadar. You’ll grasp the importance of being aware of the major and minor upgrades in software and learn how to scale, upgrade, and maintain QRadar. Once you gain a detailed understanding of QRadar and how its environment is built, the chapters will take you through the features and how they can be tailored to meet specifi c business requirements. You’ll also explore events, flows, and searches with the help of examples. As you advance, you’ll familiarize yourself with predefined QRadar applications and extensions that successfully mine data and find out how to integrate AI in threat management with confidence. Toward the end of this book, you’ll create different types of apps in QRadar, troubleshoot and maintain them, and recognize the current security challenges and address them through QRadar XDR. By the end of this book, you’ll be able to apply IBM QRadar SOC’s prescriptive practices and leverage its capabilities to build a very efficient SOC in your enterprise.

Who is this book for?

This book is for security professionals, SOC analysts, security engineers, and any cybersecurity individual looking at enhancing their SOC and SIEM skills and interested in using IBM QRadar to investigate incidents in their environment to provide necessary security analytics to responsible teams. Basic experience with networking tools and knowledge about cybersecurity threats is necessary to grasp the concepts present in this book.

What you will learn

  • Discover how to effectively use QRadar for threat management
  • Understand the functionality of different QRadar components
  • Find out how QRadar is deployed on bare metal, cloud solutions, and VMs
  • Proactively keep up with software upgrades for QRadar
  • Understand how to ingest and analyze data and then correlate it in QRadar
  • Explore various searches, and learn how to tune and optimize them
  • See how to maintain and troubleshoot the QRadar environment with ease

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Jun 28, 2023
Length: 198 pages
Edition : 1st
Language : English
ISBN-13 : 9781801076029
Category :
Concepts :
Tools :

What do you get with a Packt Subscription?

Free for first 7 days. $15.99 p/m after that. Cancel any time!
Product feature icon Unlimited ad-free access to the largest independent learning library in tech. Access this title and thousands more!
Product feature icon 50+ new titles added per month, including many first-to-market concepts and exclusive early access to books as they are being written.
Product feature icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Product feature icon Thousands of reference materials covering every tech concept you need to stay up to date.
Subscribe now
View plans & pricing

Product Details

Publication date : Jun 28, 2023
Length: 198 pages
Edition : 1st
Language : English
ISBN-13 : 9781801076029
Category :
Concepts :
Tools :

Packt Subscriptions

See our plans and pricing
Modal Close icon
$12.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 6,500+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
$129.99 billed annually
Feature tick icon Unlimited access to Packt's library of 6,500+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
$179.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 6,500+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts

Frequently bought together


Stars icon
Total $ 159.97
Practical Threat Detection Engineering
$59.99
Building a Next-Gen SOC with IBM QRadar
$44.99
Effective Threat Investigation for SOC Analysts
$54.99
Total $ 159.97 Stars icon
Visually different images

Customer reviews

Top Reviews
Rating distribution
Full star icon Full star icon Full star icon Full star icon Half star icon 4.8
(12 Ratings)
5 star 83.3%
4 star 16.7%
3 star 0%
2 star 0%
1 star 0%
Filter icon Filter
Top Reviews

Filter reviews by




esgar jimenez Jul 03, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
This book is a perfect guide to the capabilities of QRadar. It breaks down the features and processes for thebproper deployment of QRadar and how to leverage it to get the best results. As a cybersecurity professional the importance of threat hunting is immeasurable. If you want to enhance yoyr understanding of QRadar and better your companies security posture this book is the way to go to improve your SOC.
Amazon Verified review Amazon
Jonathan Cardoza Jul 17, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
This book caters to a wide range of readers in the security field, including SOC analysts, security engineers, system administrators, security architects, and executive management. This book’s purpose is to provide a comprehensive understanding of the concepts and features of QRadar. By incorporating real world examples, this book equips incident management teams with the knowledge and skills necessary to effectively handle security incidents and develop strategies to counter cybersecurity attacks.As a cybersecurity analyst that works in a SOC that utilizes QRadar, I was excited to get my hands on this book. As I was reading, I quickly realized that this book was going to be a comprehensive guide to QRadar that will assist you in constructing an efficient security operations center (SOC) for threat hunting and essential software updates. It will also provide you with an understanding of compliance, reporting, and the real-time network data storage capabilities of IBM QRadar.This book first starts with a brief introduction to QRadar components and architecture, imparting knowledge about different methods of deploying QRadar. You will recognize the importance of staying informed about major and minor software upgrades and learn how to scale, upgrade, and maintain QRadar. Once you have acquired a thorough understanding of QRadar and its underlying environment, subsequent chapters will delve into its features and how they can be customized to meet specific business requirements. You will also explore events, flows and searches through practical examples. Advancing further, you will become familiar with pre-defined QRadar applications and extensions that effectively mine data, as well as discover how to confidently integrate AI into threat management. Toward the end of the guide, you will create various types of apps in QRadar, troubleshoot and maintain them, and address current security challenges through QRadar XDR.Upon completion of this guide, you will be able to apply the prescriptive practices of IBM QRadar and leverage its capabilities to construct a highly efficient SOC within your enterprise. You will learn how to effectively utilize QRadar for threat management, understand the functionality of different QRadar components, Deploy QRadar on bare metal, cloud solutions and VMs, ingest, analyze and correlate data in QRadar and much much more! I highly recommend reading this book if you are interested in using IBM QRadar to investigate incidents in your environment and want to provide essential security analytics to responsible teams.
Amazon Verified review Amazon
Saikumar M Aug 16, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
The book covers all the techniques in IBM qradar and turns the IBM qradar as a user friendly one for me. The topics are very clear and easy to understand.after reading this book the you can find a lot in the console and make ur work much easier. If you are working in SOC and using IBM qradar definitely go for it.also If you want to become a SOC try this book.
Amazon Verified review Amazon
Brandon Lachterman Jul 05, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
As a security professional that had never gotten to touch this software before, the author truly takes you through what you need to know in a simple but effective manor, and youre left with a good understanding of how you can utilize this amazing software.
Amazon Verified review Amazon
Shrinivas Shenoy Aug 24, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
A comprehensive guide for learning the industry's popular SIEM tool IBM QRadar. The concepts have been explained in a manner with appropriate screenshots that provide close to hands-on experience.A must-have book for those entering the world of SIEM and for pros who wish to learn IBM QRadar.Thank you.
Amazon Verified review Amazon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

What is included in a Packt subscription? Chevron down icon Chevron up icon

A subscription provides you with full access to view all Packt and licnesed content online, this includes exclusive access to Early Access titles. Depending on the tier chosen you can also earn credits and discounts to use for owning content

How can I cancel my subscription? Chevron down icon Chevron up icon

To cancel your subscription with us simply go to the account page - found in the top right of the page or at https://subscription.packtpub.com/my-account/subscription - From here you will see the ‘cancel subscription’ button in the grey box with your subscription information in.

What are credits? Chevron down icon Chevron up icon

Credits can be earned from reading 40 section of any title within the payment cycle - a month starting from the day of subscription payment. You also earn a Credit every month if you subscribe to our annual or 18 month plans. Credits can be used to buy books DRM free, the same way that you would pay for a book. Your credits can be found in the subscription homepage - subscription.packtpub.com - clicking on ‘the my’ library dropdown and selecting ‘credits’.

What happens if an Early Access Course is cancelled? Chevron down icon Chevron up icon

Projects are rarely cancelled, but sometimes it's unavoidable. If an Early Access course is cancelled or excessively delayed, you can exchange your purchase for another course. For further details, please contact us here.

Where can I send feedback about an Early Access title? Chevron down icon Chevron up icon

If you have any feedback about the product you're reading, or Early Access in general, then please fill out a contact form here and we'll make sure the feedback gets to the right team. 

Can I download the code files for Early Access titles? Chevron down icon Chevron up icon

We try to ensure that all books in Early Access have code available to use, download, and fork on GitHub. This helps us be more agile in the development of the book, and helps keep the often changing code base of new versions and new technologies as up to date as possible. Unfortunately, however, there will be rare cases when it is not possible for us to have downloadable code samples available until publication.

When we publish the book, the code files will also be available to download from the Packt website.

How accurate is the publication date? Chevron down icon Chevron up icon

The publication date is as accurate as we can be at any point in the project. Unfortunately, delays can happen. Often those delays are out of our control, such as changes to the technology code base or delays in the tech release. We do our best to give you an accurate estimate of the publication date at any given time, and as more chapters are delivered, the more accurate the delivery date will become.

How will I know when new chapters are ready? Chevron down icon Chevron up icon

We'll let you know every time there has been an update to a course that you've bought in Early Access. You'll get an email to let you know there has been a new chapter, or a change to a previous chapter. The new chapters are automatically added to your account, so you can also check back there any time you're ready and download or read them online.

I am a Packt subscriber, do I get Early Access? Chevron down icon Chevron up icon

Yes, all Early Access content is fully available through your subscription. You will need to have a paid for or active trial subscription in order to access all titles.

How is Early Access delivered? Chevron down icon Chevron up icon

Early Access is currently only available as a PDF or through our online reader. As we make changes or add new chapters, the files in your Packt account will be updated so you can download them again or view them online immediately.

How do I buy Early Access content? Chevron down icon Chevron up icon

Early Access is a way of us getting our content to you quicker, but the method of buying the Early Access course is still the same. Just find the course you want to buy, go through the check-out steps, and you’ll get a confirmation email from us with information and a link to the relevant Early Access courses.

What is Early Access? Chevron down icon Chevron up icon

Keeping up to date with the latest technology is difficult; new versions, new frameworks, new techniques. This feature gives you a head-start to our content, as it's being created. With Early Access you'll receive each chapter as it's written, and get regular updates throughout the product's development, as well as the final course as soon as it's ready.We created Early Access as a means of giving you the information you need, as soon as it's available. As we go through the process of developing a course, 99% of it can be ready but we can't publish until that last 1% falls in to place. Early Access helps to unlock the potential of our content early, to help you start your learning when you need it most. You not only get access to every chapter as it's delivered, edited, and updated, but you'll also get the finalized, DRM-free product to download in any format you want when it's published. As a member of Packt, you'll also be eligible for our exclusive offers, including a free course every day, and discounts on new and popular titles.