IBM Security QRadar SOAR

IBM QRadar SOAR Python Libraries v49.0.4423

Our following Python Libraries have been updated to version 49.0.4423:

• https://pypi.org/project/resilient
• https://pypi.org/project/resilient-lib
• https://pypi.org/project/resilient-circuits
• https://pypi.org/project/resilient-sdk
• https://pypi.org/project/resilient-app-config-plugins

What’s New

Version 49.0.4423 of the Python libraries introduces a new library for configuring 3rd-party Credential Manager solutions. See details below and in the official docs https://ibm.biz/soar-pam-app-plugins.

Change Log

resilient-app-config-plugins

• Introduced version 1.0.0 of the resilient-app-config-plugins library. This release enables support for 3rd-party Credential Managers—sometimes referred to as Privileged Access Management (PAM) solutions—within SOAR apps. There is no need to directly install this library as it has been added as a dependency of resilient and will be automatically pulled in when resilient and resilient-circuits are upgraded.
• v1.0.0 includes support for both the HashiCorp Vault and Cyberark PAM solutions. Support for custom plugins is limited, but can be done by following the guide at https://ibm.biz/custom-pam-plugins.
• See https://ibm.biz/soar-pam-app-plugins for details on how to configure and deploy apps with 3rd-party credential managers. Be sure that your app is running version 49.0.4423 or greater of resilient-circuits to take advantage of this feature.
• Note: for app host deployed apps, protected secrets will continue to work as expected and should be used in most cases. Integration server environments continue to support Keyring as the default credential manager with no configurations changes needed.

resilient-sdk

• Added support to create markdown files for Playbooks as they would have been created with Workflows. Includes automatic detection of global scripts in codegen when exporting playbooks.

resilient-circuits

• Improved obfuscation of sensitive information from app.config in logs.
• Added resilient-app-config-plugins as a new package to manage third party credentials within SOAR apps.

resilient-lib

• No major additions. See the linked Change Log for full details.

resilient

• Improved retry logic for non-recoverable error codes.

You can update your copies of each package using the pip install --upgrade command. Example:

pip install --upgrade "resilient-sdk>=49.0"

Checkout the Change Log and our docs at https://ibm.biz/soar-python-docs for more.