Case Study: a top 30 US bank achieves better threat detection with ScienceSoft’s IBM Security QRadar SIEM tuning

Top 30 US Bank boosts QRadar detection with 60 correlation rules from ScienceSoft

ScienceSoft was engaged by a top 30 US bank to address a challenge with its IBM Security QRadar SIEM deployment. Following an initial Phase 1 setup, the bank's security team lacked a comprehensive security overview because QRadar could not process events from many log sources, leaving blind spots in their monitoring.

To solve this, ScienceSoft's team created custom log source extensions and enhancements to connect previously unsupported platforms, developed 60 new correlation rules for improved offense detection, and provided training for the bank's internal team. As a result, ScienceSoft delivered a significantly higher quality of data, eliminated unprocessed events, and enabled the detection of offenses that were previously missed or considered false positives.