IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

MXToolBox SOAR APP question

  • 1.  MXToolBox SOAR APP question

    Posted Thu August 11, 2022 12:28 PM
    Does anyone have successful experience using the MXTookBox App integration with SOAR?  Specifically around email authentication (SPF/DKIM/DMARC)?  My customer has a -all in their SPF record.  They don't have SOAR.  However, I would like to show them a use case around a spoofed email and run a playbook that queries their record and displays the -all instead of ~all. Which will help their ongoing troubleshooting of phishing and spoofed messages.

    If you'd like to email directly I am at michaelm@ibm.com.

    Cheers,

    Michael

    ------------------------------
    Michael Marrochello
    ------------------------------