Early Threat Detection and Safeguarding Data with IBM QRadar and IBM Copy Services Manager on IBM DS8000
IBM · IBM Redbooks
Apr 2022 · IBM Redbooks
Ebook
44
Pages
family_home
Eligible
info
reportRatings and reviews aren’t verified Learn More
About this ebook
The focus of this blueprint is to highlight early threat detection by IBM® QRadar® and to proactively start a cyber resilience workflow in response to a cyberattack or malicious user actions.
The workflow uses IBM Copy Services Manager (CSM) as orchestration software to start IBM DS8000® Safeguarded Copy functions. The Safeguarded Copy creates an immutable copy of the data in an air-gapped form on the same DS8000 system for isolation and eventual quick recovery.
This document also explains the steps that are involved to enable and forward IBM DS8000 audit logs to IBM QRadar.
It also discusses how to use create various rules to determine a threat, and configure and start a suitable response to the detected threat in IBM QRadar.
Finally, this document explains how to register a storage system and create a Scheduled Task by using CSM.
Rate this ebook
Tell us what you think.
Reading information
Smartphones and tablets
Install the Google Play Books app for Android and iPad/iPhone. It syncs automatically with your account and allows you to read online or offline wherever you are.
Laptops and computers
You can listen to audiobooks purchased on Google Play using your computer's web browser.
eReaders and other devices
To read on e-ink devices like Kobo eReaders, you'll need to download a file and transfer it to your device. Follow the detailed Help Center instructions to transfer the files to supported eReaders.
