Welcome to the IBM Community, a place to collaborate, share knowledge, & support one another in everyday challenges. Connect with your fellow members through forums, blogs, files, & face-to-face networking.
IBM Security Community In this user community of over 15,000 members, we work together to overcome the toughest challenges of cybersecurity. Join the Community
We're trying to export attachments related to incidents via REST API from IBM SOAR/Resilient to another tool. But it seems that the /orgs/{org_id}/incidents/{inc_id}/attachments/{attach_id}/contents API endpoint only takes the "content-type": "application/json" header. How would we be able to export attachemnt files that are not text based from SOAR/Resilient to somewhere else via only REST API?
You need to perform a GET on the /contents API. This will allow you to read a content-type/octet-stream and write it to file.