IBM Security Join our 16,000+ members as we work together to overcome the toughest challenges of cybersecurity. Join the Community
We're trying to export attachments related to incidents via REST API from IBM SOAR/Resilient to another tool. But it seems that the /orgs/{org_id}/incidents/{inc_id}/attachments/{attach_id}/contents API endpoint only takes the "content-type": "application/json" header. How would we be able to export attachemnt files that are not text based from SOAR/Resilient to somewhere else via only REST API?
You need to perform a GET on the /contents API. This will allow you to read a content-type/octet-stream and write it to file.