Apps that are Installed by Default with JSA

QRadar Assistant

Use the QRadar Assistant app to manage your app and content extension inventory, view app and content extension recommendations, and get links to other information. For more information, see QRadar Assistant App Guide.

• 7.3.3 Fix Pack 6 or later

• 7.4.1 Fix Pack 2 or later

• 7.4.2 GA or later

QRadar Pulse

QRadar Pulse is a dashboard app that you can use to communicate insights and analysis about your network. Take the pulse of your SOC with dynamic real-time dashboards that provide meaningful insights into your security posture and threat landscape. Visualize offenses, network data, threats, and malicious user behavior from around the world in geographical maps, a built-in 3D threat globe, and auto updating charts. Import and export dashboards to share with colleagues. See offenses unfold near real time and track your security threats from around the globe. For more information, see Pulse App Guide.

7.4.0 or later

Log Source Management

The Log Source Management app provides an easy-to-use workflow that helps you quickly find, create, edit, and delete log sources. Use the simplified workflow to change parameters for a number of log sources at the same time. To configure log sources in 7.4.0, you must use the Log Source Management app. For more information, see Log Source Management App Guide.

7.4.0 or later

Use Case Manager

Use the guided tips in Use Case Manager to help you ensure that JSA is optimally configured to accurately detect threats throughout the attack chain. Use Case Manager includes a rule explorer that offers flexible reports that are related to your rules. Use Case Manager also exposes pre-defined mappings to system rules and to help you map your own custom rules to MITRE ATT&CK tactics and techniques. For more information, see Use Case Manager Guide.

7.4.1 or later