I developed a script that when an analyst assigns an incident to him within Resilient, in QRadar the "assigned_to" field will be changed to the analyst's name. However, this script is local, and I need to put it inside Resilient, so that it can be automatic. Does anyone have any ideas?

------------------------------
Vítor Fagundes Alves Nogueira
------------------------------

Vitor,

This will need to become a function that is run on an integration server. You would make a rule that when user assigns themselves as owner inside resilient it would launch the function/workflow to make the call to the function.. 

https://developer.ibm.com/security/resilient/functions/

Once you have converted it to a function, you can then trigger it with a workflow that happens on a rule that watches for owner assignment.

------------------------------
Richard Giesige
Security Engineer
Oshkosh Corporation
Oshkosh
------------------------------