Who is the Xpanse IBM QRadar App for?

The Cortex® Xpanse™ QRadar App supports multiple teams.
The Cortex® Xpanse™ QRadar App supports multiple teams, including:
  • Security Operations Center (SOC)
    —The SOC team uses the QRadar App to integrate Cortex Xpanse Expander data into the organization’s security ecosystem to help triage alerts.
  • Incident Response (IR)
    —The IR team uses the QRadar App to pull in Cortex Xpanse Expander data to add context during incident response.

Recommended For You