In IBM QRadar, the magnitude score of an offense is influenced by several parameters, one of which is credibility. Here’s a detailed explanation:
Magnitude Score: The magnitude score represents the severity and importance of an offense in QRadar. It is a composite score that helps prioritize incidents for investigation.
Credibility Parameter: Credibility assesses the reliability of the event source and the likelihood that the event represents a real threat. Higher credibility indicates that the source is reliable and the threat is more likely to be legitimate.
Contribution to Magnitude: The credibility parameter directly influences the magnitude score by weighting the offense higher if the credibility of the event ishigh. This ensures that more reliable and potentially more severe incidents are prioritized.
Credibility is one of the key factors used by QRadar to assess and prioritize security incidents, ensuring effective incident management.
ReferencesIBM Security QRadar SIEM and IBM Security QRadar EDR integration.pdf
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit