Cargando…
Enhanced Cyber Resilience Threat Detection with IBM FlashSystem Safeguarded Copy and IBM QRadar /
The focus of this document is to demonstrate an early threat detection by using IBM® QRadar® and the Safeguarded Copy feature that is available as part of IBM FlashSystem® and IBM SAN Volume Controller. Such early detection protects and quickly recovers the data if a cyberattack occurs. This documen...
| Autor principal: | |
|---|---|
| Autor Corporativo: | |
| Formato: | Electrónico eBook |
| Idioma: | Inglés |
| Publicado: |
IBM Redbooks,
2021.
|
| Edición: | 1st edition. |
| Acceso en línea: | Texto completo (Requiere registro previo con correo institucional) |
MARC
| LEADER | 00000cam a22000007a 4500 | ||
|---|---|---|---|
| 001 | OR_on1268279340 | ||
| 003 | OCoLC | ||
| 005 | 20231017213018.0 | ||
| 006 | m o d | ||
| 007 | cr cnu|||||||| | ||
| 008 | 140821s2021 xx o 000 0 eng d | ||
| 040 | |a AU@ |b eng |c AU@ |d OCLCQ |d TOH |d OCLCQ | ||
| 020 | |z 9780738459875 | ||
| 020 | |z 0738459879 | ||
| 024 | 8 | |a 9780738459875 | |
| 029 | 0 | |a AU@ |b 000069849239 | |
| 035 | |a (OCoLC)1268279340 | ||
| 049 | |a UAMI | ||
| 100 | 1 | |a Storage, IBM, |e author. | |
| 245 | 1 | 0 | |a Enhanced Cyber Resilience Threat Detection with IBM FlashSystem Safeguarded Copy and IBM QRadar / |c Storage, IBM. |
| 250 | |a 1st edition. | ||
| 264 | 1 | |b IBM Redbooks, |c 2021. | |
| 300 | |a 1 online resource (52 pages) | ||
| 336 | |a text |b txt |2 rdacontent | ||
| 337 | |a computer |b c |2 rdamedia | ||
| 338 | |a online resource |b cr |2 rdacarrier | ||
| 347 | |a text file | ||
| 520 | |a The focus of this document is to demonstrate an early threat detection by using IBM® QRadar® and the Safeguarded Copy feature that is available as part of IBM FlashSystem® and IBM SAN Volume Controller. Such early detection protects and quickly recovers the data if a cyberattack occurs. This document describes integrating IBM FlashSystem audit logs with IBM QRadar, and the configuration steps for IBM FlashSystem and IBM QRadar. It also explains how to use the IBM QRadar's device support module (DSM) editor to normalize events and assign IBM QRadar identifier (QID) map to the events. Post IBM QRadar configuration, we review configuring Safeguarded Copy on the application volumes by using volume groups and applying Safeguarded backup polices on the volume group. Finally, we demonstrate the use of orchestration software IBM Copy Services Manager to start a recovery, restore operations for data restoration on online volumes, and start a backup of data volumes. | ||
| 542 | |f Copyright 2021 © IBM |g 2021 | ||
| 550 | |a Made available through: Safari, an O'Reilly Media Company. | ||
| 588 | |a Online resource; Title from title page (viewed August 17, 2021) | ||
| 590 | |a O'Reilly |b O'Reilly Online Learning: Academic/Public Library Edition | ||
| 710 | 2 | |a Safari, an O'Reilly Media Company. | |
| 856 | 4 | 0 | |u https://learning.oreilly.com/library/view/~/9780738459875/?ar |z Texto completo (Requiere registro previo con correo institucional) |
| 936 | |a BATCHLOAD | ||
| 994 | |a 92 |b IZTAP | ||