QRadar​ TruSTAR's app enables ingestion of OSINT, 3rd party cybersecurity threat intelligence, ISAC/ISAO feeds and your own internal data into your QRadar instance. TruSTAR is a threat intelligence platform designed to accelerate incident analysis process and exchange of intelligence among various internal and external teams. This App allows users to utilize context of TruSTAR's IOCs and incidents within their QRadar incidents system workflow. TruSTAR arms security teams with the high signal intelligence from sources such as internal historical data, open and closed intelligence feeds and anonymized incident reports from TruSTAR's vetted community of enterprise members.

QRadar TruSTAR integration automatically sends triggered alerts and offences to the TruSTAR platform for enrichment and analysis, while also enabling search indicators on TruSTAR from directly within QRadar providing relevant data throughout every step of the process.

Key Features
  - Submit QRadar offenses and events to your TruSTAR private as reports. This can be performed as a manual or automated action.
  - Search TruSTAR for all indicators correlated to indicator of interest in QRadar.
  - Populate QRadar reference list with indicators from TruSTAR.
  - Age TruSTAR indicators in the QRadar reference list to keep it relevant and actionable.

Download TruSTAR app from App Exchange for QRadar for Free!