ibm-qradar

IBM QRadar Ansible Collection

Tools to get Metrics from QRadar SIEM, for complementary monitoring of SNMP metrics of QRadar.

Conversion Scripts to ingest McAfee Cloud Proxy logs into IBM Qradar. This requires pulling the websaas CSV files from the McAfee CSR Server to be converted into an ingestible format

Analyze IBM QRadar CRE performance from JMX TSV exports. Ranked rule reports (HTML/JSON/CSV/MD) with optimization recommendations. Not affiliated with IBM.

Colección de scripts utilitarios para QRadar. Algunos se extrajeron a proyectos propios: → qradar-rule-profiler, → windows-audit, → tls-syslog-pki.

Enable Windows advanced audit subcategories required by IBM QRadar WinCollect's NSA filter — locale-independent (uses GUIDs), idempotent, with backup/rollback. CMD + PowerShell.

pySigma backend that compiles Sigma detection rules into IBM QRadar AQL