List of Contributions

Brian Coleman

Contact Details

My Content

1 to 9 of 9 total
Posted By Brian Coleman Tue August 31, 2021 03:41 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Does anyone know how you might be able to export a row / rows from a datatable (tab delimited if possible) and attach them to an outbound email? I can get the outbound email, I can get data from the data table into the outbound email, but cannot figure out how to create a file from the datatable and ...
Posted By Brian Coleman Tue February 23, 2021 02:08 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
I am trying to run an automated workflow on a datatable. I have everything running smoothly except for the ability to update that table in the "Pre Processing" script. I am not sure if this can be done, but i have successfully updated the table in "Post Processing". Here is my code: PRE-PROCESSING: ...
Posted By Brian Coleman Wed January 13, 2021 08:24 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
I have successfully got the remote command to run from Resilient with one issue we discovered. Our remote_command calls an executable successfully, but here is the issue: Remote command successfully sends parameters to remote .exe In the parameters being sent over, one includes a remote ...
Posted By Brian Coleman Fri December 18, 2020 08:22 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Disregard, found it. Its in the send_email and smtp_mailer scripts. ------------------------------ Brian Coleman ------------------------------
Posted By Brian Coleman Fri December 18, 2020 08:04 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Ryan, any idea on this outbound email how to remove or comment out the addition of any attachments to the incident? I have the script working properly, but then when i run it on an incident with attachments, all the attachments are on the outbound email. Any ideas? ------------------------------ ...
Posted By Brian Coleman Tue October 20, 2020 09:30 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Team - I am finally getting back to this and after i have installed the app, i don't see the folders for the Jinja templates. My app config is: # The integration will use this template out of the box. If removed, it will default to the pre-processing script. template_file=jinja_templates/activ ...
Posted By Brian Coleman Thu May 21, 2020 10:50 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks Ryan. Any idea how i can get additional data beyond the incident level fields into the template? I would like to add artifacts as well, maybe even data from a specific data table. ------------------------------ Brian Coleman ------------------------------
Posted By Brian Coleman Wed May 20, 2020 08:42 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
I installed the newest version of the outbound email app and finally have it running with no errors. My question is where do the "Jinja Templates" get placed so they are read by the app? I have the circuit installed on my laptop for Dev purposes and just can't get these templates to be read at all. ...
Posted By Brian Coleman Fri October 25, 2019 08:55 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Anyone know if there is a way to pull back additional information with the "Get Mailbox Info" function for the MS Exchange App (https://exchange.xforce.ibmcloud.com/hub/extension/26b8726f3320b1de10ad2c252930b0df) Specifically, the default script pulls limited fields. Can we pull DisplayName, Size, ...