IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Resilient; Notes not found the respective task

    Posted 08/30/19 10:38 AM
      |   view attached
    Hi Team,

    We could see that David Valor has updated a comment in "Identify Infected System(s)" task as per the timeline, but the same note is not found in the respective task.
    Please find herewith the attachment of screenshot for your reference.



    ------------------------------
    Ravichandran P
    ------------------------------


  • 2.  RE: Resilient; Notes not found the respective task

    Posted 08/30/19 10:42 AM
    Could you please give some idea how to identify the issue.

    ------------------------------
    Ravichandran P
    ------------------------------



  • 3.  RE: Resilient; Notes not found the respective task

    Posted 09/02/19 04:27 AM
    Hello Ravichandran,

    We think we can help with this issue. If someone writes a comment/note in a task and subsequently deletes that comment/note the original news feed entry:
    David Valor wrote a note on the Task Identity Infected System(s)
    will not be removed but a new entry with the removal of the note will be added to the news feed. Could you tell us whether you can see if the original note was deleted (at some point in the last 5 months)?

    Hopefully that helps,
    Kind regards,


    ------------------------------
    Sean OGorman
    ------------------------------