IBM QRadar is a security event management tool (SIEM) that helps organizations detect, investigate, and respond to security threats and incidents. The system gathers and analyzes data from multiple…

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

This guide provides step-by-step instructions on how to add Windows machines as log sources to IBM QRadar. It includes detailed prerequisite checks, logging into the QRadar Admin Panel, selecting the appropriate log type, and configuring a Syslog agent on Windows. Additionally, it describes setting up NXLog and configuring it to forward logs to the QRadar server.

How to Add Windows Machines as Log Sources to QRadar: A Step-by-Step Guide