Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Offense Management

JSA reduces billions of events and flows into a manageable number of actionable offenses that are prioritized by their impact on your business operations. Use the Offenses tab to access all of the data that you need to understand even the most complex threats.

By providing immediate context for the offense, JSA helps you to quickly identify which offenses are the most important, and to begin an investigation to find the source of the suspected security attack or policy breach.


You can also manage offenses using the QRadar Analyst Workflow interface. For more information, see QRadar Analyst Workflow.


You cannot manage offenses in Log Manager. For more information about the differences between JSA and Log Manager, see Capabilities in Your JSA Product.