Hi everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!

------------------------------
Le Hieu
------------------------------

Hi @Le Hieu- Looks like you also posted this question to Security here:
https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?GroupId=2497&MessageKey=08ba19e0-e247-4ba4-b8e6-2ff3a0d2b4ee&CommunityKey=f9ea5420-0984-4345-ba7a-d93b4e2d4864&tab=digestviewer

Did you find the answer you were looking for? Thanks for posting your question!
​

------------------------------
Jina K
------------------------------

Original Message:
Sent: Tue August 24, 2021 03:13 AM
From: Le Hieu
Subject: How to push Indicators from ThreatConnect to QRadar?

Hi everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!

------------------------------
Le Hieu
------------------------------