IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

How to call QRadar details from SOAR incident in playbook function/script

  • 1.  How to call QRadar details from SOAR incident in playbook function/script

    Posted 02/23/24 11:51 AM

    Trying to pull the QRadar offense index, whether it's an IP, URL, hostname, and use that information to query our CMDB. 

    I've looked but have been unable to find any documentation on how to do this, and the QRadar app doesn't seem to have a way to call it natively. 

    Has anyone managed this? 



    ------------------------------
    Dylan Diamond
    ------------------------------