App Connect

 View Only

  • 1.  How to push Indicators from ThreatConnect to QRadar?

    Posted Tue August 24, 2021 09:54 AM
    Hi everyone!

    I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

    Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

    Besides, I also don't know how to configure QRadar side. Looking forward to your help!



    ------------------------------
    Le Hieu
    ------------------------------


  • 2.  RE: How to push Indicators from ThreatConnect to QRadar?

    Posted Tue September 07, 2021 02:01 PM
    Hi @Le Hieu- Looks like you also posted this question to Security here:
    https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?GroupId=2497&MessageKey=08ba19e0-e247-4ba4-b8e6-2ff3a0d2b4ee&CommunityKey=f9ea5420-0984-4345-ba7a-d93b4e2d4864&tab=digestviewer

    Did you find the answer you were looking for? Thanks for posting your question!
    ​

    ------------------------------
    Jina K
    ------------------------------

    Original Message