IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

it is possible to add automatic incidents from third parties to the SOAR Incident tray

  • 1.  it is possible to add automatic incidents from third parties to the SOAR Incident tray

    Posted Fri February 28, 2025 09:20 AM
    good morning community.
     
    I have a question that I want to share with you, I have an integrated Cortex EDR API, my question is if incidents can be added automatically to the incident tray.
     
    I have seen that incidents are automatically escalated if you have a siem qradar and its SOAR plugin configured, in the case you want to add from a third party incident source is it possible to add to the incident tray?



    ------------------------------
    jose g
    ------------------------------


Related Content