miun.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
IBM QRadar SIEM:: Undertitel: Installation, dokumentation och utvärdering
Mid Sweden University, Faculty of Science, Technology and Media, Department of Information Systems and Technology.
2018 (Swedish)Independent thesis Basic level (university diploma), 10 credits / 15 HE creditsStudent thesis
Abstract [sv]

Detta arbete har utförts på uppdrag av ett konsultföretag vars systemkonsult önskar dokumentera grundläggande kunskap gällande IBM Qradar SIEM. Arbetet beskriver vad IBM QRadar SIEM är och vad det kan göra,samt går igenom installation av QRadar Community Edition och information gällande händelser och flöden i en virtuell miljö. Arbetet redovisar även den uppskattade tiden det tar att installera QRadar CE och de applikationer som användes i detta arbete. En dokumentation skapades för systemkonsulten innehållandes denna information. Det tar även upp en etisk diskussion angående SIEM, andra SIEM-lösningar samt olika typerav nätverksattacker.

Abstract [en]

This work has been performed on behalf of a consulting company whose system consultant wishes to document basic knowledge regarding IBM QRadar SIEM. The work describes what IBM QRadar SIEM is and what it can do, as well as reviewing the installation of QRadar Community Edition and information about events and flows in a virtual environment. The work also reports the estimated time it takes to install QRadar CE and the applications used in this work. A documentation was created for the system consultant containing this information.This work has been performed on behalf of a consulting company whose system consultant wishes to document basic knowledge regarding IBM QRadar SIEM. The work describes what IBM QRadar SIEM is and what it can do, as well as reviewing the installation of QRadar Community Edition and information about events and #ows in a virtual environment. The work also reports the estimated time it takes to install QRadar CE and the applications used in this work. A documentation was created for the system consultant containing this information. It also addresses an ethical discussion regarding SIEM, other SIEM solutions and various types of network attacks.

Place, publisher, year, edition, pages
2018. , p. 43
Keywords [en]
QRadar, SIEM, CentOS, WinCollect, SysMon, Installation, Event, Flow
Keywords [sv]
QRadar, SIEM, CentOS, WinCollect, SysMon, Installation, Händelse, Flöde
National Category
Computer Engineering
Identifiers
URN: urn:nbn:se:miun:diva-36558Local ID: DT-V18-G2-014OAI: oai:DiVA.org:miun-36558DiVA, id: diva2:1332566
Subject / course
Computer Engineering DT1
Educational program
Network Management TNÄTG 120 higher education credits
Supervisors
Examiners
Available from: 2019-06-28 Created: 2019-06-28 Last updated: 2019-06-28Bibliographically approved

Open Access in DiVA

fulltext(3114 kB)1 downloads
File information
File name FULLTEXT01.pdfFile size 3114 kBChecksum SHA-512
b62cccffa9831bd520a47e8bb8e579b249bd1403217c022ba7fecc92ce99692bcdec23b4be44572e5e7171f9794008e0b9c345ba936008bfcc30858b7ab74fd5
Type fulltextMimetype application/pdf

Search in DiVA

By author/editor
Zetterlund, Rickard
By organisation
Department of Information Systems and Technology
Computer Engineering

Search outside of DiVA

GoogleGoogle Scholar
Total: 1 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 5 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf