Qradar - Network Inbound Evidence Collection
  • 02 Apr 2025
  • 1 Minute to read
  • Dark
    Light
  • PDF

Qradar - Network Inbound Evidence Collection

  • Dark
    Light
  • PDF

Article summary

Qradar - Network Inbound Evidence Collection

Description

Qradar Network Inbound Evidence Collection is a powerful automation tool that helps organizations collect and store evidence from network traffic for use in investigations and compliance activities. It enables organizations to quickly and securely collect evidence from network traffic inbound to the network, such as emails, web traffic, and file transfers. This evidence can be used to identify malicious activity, investigate security incidents, and ensure compliance with regulatory requirements. Qradar Network Inbound Evidence Collection automates the collection process, allowing organizations to quickly and easily collect and store evidence from network traffic. It also provides advanced features such as filtering and aggregation, allowing organizations to quickly and easily identify suspicious activity. Additionally, Qradar Network Inbound Evidence Collection provides a secure and reliable storage solution for evidence, allowing organizations to store evidence for long-term use. With Qradar Network Inbound Evidence Collection, organizations can quickly and easily collect and store evidence from network traffic, helping them to quickly and effectively investigate security incidents and ensure compliance with regulatory requirements.

Trigger Request

  • HTTP Post Request

  • Headers:

KeyValue
Content-Typeapplication/json
  • Json body parameters:
ParametersTypeDescription
alertIdstringPlease provide the description of this parameter.
querystringPlease provide the description of this parameter.

Supported CDC Versions

  • 2.8

Was this article helpful?