QRadar detecting insider threat: USB inserted and bad website visited

  Рет қаралды 9,454

Jose Bravo

Jose Bravo

Күн бұрын

Simple rule to detect when a suer visits a restricted site after having inserted a USB stick.
Here is a link to a pdf with the links to my recent videos:
ibm.box.com/s/...

Пікірлер: 4
@rohanbhasin
@rohanbhasin 7 жыл бұрын
Great video
@tooweights
@tooweights 3 жыл бұрын
where do i can get that insider script?
@johnclarke9148
@johnclarke9148 6 жыл бұрын
Hey Jose, I've run the scripts on my QRadar instance but the events are coming up as Unknown / Generic. Have I missed a step or is there a previous video which has prior setup?
@simonlevy2154
@simonlevy2154 2 жыл бұрын
It is unparsed. Parsing failed in your case.
QRadar UBA Example Launching Restricted Programs
4:31
QRadar UBA Example Launching Restricted Programs
Jose Bravo
Рет қаралды 2,9 М.
QRadar Detecting multiple login failures to compliance servers
9:47
QRadar Detecting multiple login failures to compliance servers
Jose Bravo
Рет қаралды 21 М.
Caleb Pressley Shows TSA How It’s Done
0:28
Caleb Pressley Shows TSA How It’s Done
Barstool Sports
Рет қаралды 60 МЛН
Маусымашар-2023 / Гала-концерт / АТУ қоштасу
1:27:35
Маусымашар-2023 / Гала-концерт / АТУ қоштасу
Jaidarman OFFICIAL / JCI
Рет қаралды 390 М.
Жездуха 42-серия
29:26
Жездуха 42-серия
Million Show
Рет қаралды 2,6 МЛН
УЛИЧНЫЕ МУЗЫКАНТЫ В СОЧИ 🤘🏻
0:33
УЛИЧНЫЕ МУЗЫКАНТЫ В СОЧИ 🤘🏻
РОК ЗАВОД
Рет қаралды 7 МЛН
QRadar: All about QRadar Rules - Part 2
17:20
QRadar: All about QRadar Rules - Part 2
Big Blue Helps
Рет қаралды 2,8 М.
QRadar: All about QRadar Rules - Part 1
22:50
QRadar: All about QRadar Rules - Part 1
Big Blue Helps
Рет қаралды 10 М.
Threat Hunting in Security Operation - SANS Threat Hunting Summit 2017
27:39
Threat Hunting in Security Operation - SANS Threat Hunting Summit 2017
SANS Digital Forensics and Incident Response
Рет қаралды 42 М.
Packet Traveling - How Packets Move Through a Network
14:39
Packet Traveling - How Packets Move Through a Network
Practical Networking
Рет қаралды 854 М.
QRadar Threat Intelligence
7:32
QRadar Threat Intelligence
Loi Liang Yang
Рет қаралды 18 М.
Hunting and Scoping A Ransomware Attack
30:14
Hunting and Scoping A Ransomware Attack
SANS Digital Forensics and Incident Response
Рет қаралды 7 М.
QRadar SIEM
8:46
QRadar SIEM
Loi Liang Yang
Рет қаралды 93 М.
I tested DeepSeek vs. OpenAI-o1 for data science tasks: Here’s what I found.
15:12
I tested DeepSeek vs. OpenAI-o1 for data science tasks: Here’s what I found.
Thu Vu
Рет қаралды 147 М.
QRadar Detecting DDoS attacks and Superflows
8:48
QRadar Detecting DDoS attacks and Superflows
Jose Bravo
Рет қаралды 18 М.
Caleb Pressley Shows TSA How It’s Done
0:28
Caleb Pressley Shows TSA How It’s Done
Barstool Sports
Рет қаралды 60 МЛН