Device Support Modules (DSM) enable QRadar SIEM to normalize events from raw . firewall denies, multiple failed login attempts, and potential botnet activity..