Hey,
I am looking for a way of how we can bring tickets or use the data of the tickets in Qradar.
E.g.: Admin A creates User X in AD.
If there is no Ticket, Qradar should be able to recognize that there is no ticket but in the logs a user has been created.
If there is a ticket, Qradar should know that Admin A created User X in AD and will compare that to the logs.
Thanks in advance for your help,
Michel
