What is one benefit of a lazy search?
A QRadar lazy search quickly identifies indicators of compromise (IOCs) by returning the first limited set of events related to the search criteria, so an analyst can investigate without reviewing every matching event.
Community Discussion