Turning IBM QRadar Alerts into Action with Criminal IP

This announcement details the integration of Criminal IP with IBM QRadar SIEM and SOAR, bringing external IP-based threat intelligence directly into QRadar to enable real-time risk scoring from firewall logs, in-context investigations via integrated lookups, and automated enrichment of IP and URL artifacts through pre-built SOAR playbooks—aimed at accelerating detection, investigation, and response within SOC workflows.