IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Addressing an attachment from playbooks/scripts

    Posted Thu March 23, 2023 10:46 AM

    How to address an attachment in an incident from a playbook/script?



    ------------------------------
    Shivani Raja
    ------------------------------


  • 2.  RE: Addressing an attachment from playbooks/scripts

    Posted Mon March 27, 2023 09:16 AM

    Hello Shivani,

    You can create attachment level playbooks to take actions on attachments. Another option is to write an API call from a function to get incident attachments.



    ------------------------------
    Priya Sapra
    ------------------------------

    Original Message


Related Content