Understanding the difference between netflows, full packet capture (QIF), and and the way QNI inspect the whole payload and send Netflows to QRadar.
This link takes you to a public site where I publish an index of all my recent videos and where the tolls I mention in some of those are available: https://ibm.box.com/s/ich0yyiw54y0ek6...