News
RiskIQ Joins IBM Security App Exchange Community
August 2016 by Marc Jacob
RiskIQ launched RiskIQ PassiveTotal App for IBM QRadar, which integrates with IBM
security intelligence technology to achieve fully integrated external threat context
to security incidents. Joint customers can accelerate incident remediation
seamlessly by accessing internet datasets as they investigate offences in IBM
QRadar.
RiskIQ scans and collects external internet data at massive scale—datasets the
RiskIQ’s PassiveTotal App uses to create a feedback loop in which QRadar is
constantly being updated with the latest threat data.
The new application is freely available to the security community through the IBM
Security App Exchange, a marketplace where developers across the industry can share
applications based on IBM Security technologies. As threats are evolving faster than
ever, collaborative development amongst the security community will help
organisations adapt quickly and speed innovation in the fight against cybercrime.
RiskIQ PassiveTotal App For IBM QRadar leverages IBM Security QRadar, the
company’s security intelligence platform which analyses data across an
organisation’s IT infrastructure in real-time to identify potential security
threats. Leveraging QRadar’s new open application programming interfaces (API),
RiskIQ PassiveTotal App For IBM QRadar allows users to reduce the number of alerts
they need to manage, speed up incident response and prevent cyberattacks.
RiskIQ PassiveTotal App for IBM QRadar uses RiskIQ reference sets, which are created
automatically, make the integration completely bi-directional, enabling the security
operations team to create IBM QRadar rules based on external internet data and thus
get automatically alerted to offences. As the alert is triaged and put into an
incident response workflow, the external information is available for fast
resolution. Data enrichment applied to both threat detection and IR functions
benefits the security team as a whole.
