IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  create Incidents for FireEye NX automatically using FireEye NX SOAR application

    Posted 09/04/23 08:25 AM
    Edited by Mohamad islam Hamadieh 09/05/23 04:55 AM

    Dear Team ,

    I have recently installed and deployed FireEye NX SOAR application 

    The app comes with punch of functions, unfortunately, it dose not come with a functionality to periodically pull incidents like sentinel application for example.

    I was wondering if its feasible to create a playbook that could pull alerts from fire eye periodically.

    Thanks.

    Best RegardsMohamad islam 

     



    ------------------------------
    mohamad islam hamadieh
    ------------------------------



  • 2.  RE: create Incidents for FireEye NX automatically using FireEye NX SOAR application

    Posted 09/08/23 09:41 AM

    Hi Mohamad islam,

    Greetings. To automatically pull the alerts in certain intervals, the Sentinel application has poller functionality which is not present in FireEye NX application at the moment. It is not feasible to just create a playbook to perform the same action. 

    Thank you



    ------------------------------
    Dillip Kumar Nath
    ------------------------------



  • 3.  RE: create Incidents for FireEye NX automatically using FireEye NX SOAR application

    Posted 09/10/23 02:53 AM

    dear dillip ,

    thank you for the explanation.

    Best Regards,Mohamad islam Hamadieh

    SOC Engineer

    Original Message


Related Content