IBM Security Master Skills University

November 5-9, 2018

London, United Kingdom

IBM QRadar

The QRadar track provides a unique deep dive education experience including the latest product updates and interactive discussions on best practices, delivered by IBM subject matter experts. This class will provide the experienced QRadar user with an opportunity to sit with their peers and experience expert level knowledge transfer from the people who build, deploy and support QRadar every day. Based on previous attendee feedback, this track will feature a maintent session in the morning, then offer your choice of breakout sessions in the afternoons - allowing our attendees to go to sessions on the topics of most value to them. Come and learn about functionality you may not be taking advantage of, share tips and best practices, network with your peers, and gain the insights needed to achieve your 2018 goals.

QRadar Main-Tent

  • Roadmap Update
  • Architecture Deep Dive
  • Data Ingestion & Integrations
  • Correlations, Use Cases & Tuning
  • Getting Support & Advanced Troubleshooting


  • AppExchange, Designing & Developing Apps
  • QRadar Advisor with Watson, Cognitive
  • User Behavior Analytics & LDAP App Deep Dive
  • Searching, Reporting & Filtering (AQL, Reference Data, etc.)
  • Ingestion, Integrations (DSM) Roadmap & Q&A
  • Network Monitoring & Forensics
  • Multi-Tenancy, Domains & Role based Access Controls
  • QRadar Vulnerability & Risk Manager
  • Windows Log Collection (Wincollect, etc.)
  • Resiliency (HA/DR Best Practices, etc.)
  • Data Analysis
  • Optimizing your QRadar Deployment
  • Cloud Architecture, SaaS, Monitoring & Integrations
  • Solve your PMR / Deployment Troubleshooting
  • Open Lab Sessions, Use Cases & New Product Showcases


The target audience for the QRadar track are experienced QRadar security professionals (e.g. analysts, admins, architects, engineer) who have used the product for several years, who may have attended our classes (101 & 102) and desire more advanced training. There will be no introductory tracks, or training focused on items covered in our traditional documentation.