VENDOR APPEAL GUIDE
ReaQta false positive?
Here’s where to start.
IBM identifies ReaQta as the former name of QRadar EDR and publishes product-specific support instructions.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
How to request a review
Sandbox review
IBM identifies ReaQta as the former name of QRadar EDR and publishes product-specific support instructions.
- Use the IBM QRadar EDR / ReaQta support instructions to open a case with your IBMid.
- Identify the old ReaQta VirusTotal analysis, provide its report URL and file SHA-256, and describe the disputed finding.
- Ask IBM support to confirm the appropriate team for the affected deployment or legacy analysis.
- IBM's instructions require an IBMid linked to the company customer account.
- This is a product-support route, not a confirmed public ReaQta false-positive form. Legacy-product and support entitlement restrictions may apply.
Names you may see in a report
ReaQtaReaQta-Hive
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.