List of Contributions

PAUL FORMOSA

Contact Details

My Content

1 to 20 of 24 total
Posted By PAUL FORMOSA Wed December 14, 2022 12:47 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi Richard, I did not deleted any scripts (that I'm aware of). Is there a way in the logs to determine what rule (or other) called that script to produce this error? ------------------------------ Paul Formosa ------------------------------
Posted By PAUL FORMOSA Tue December 13, 2022 05:19 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi all, we recently made some updates to our playbooks and started receiving the following error when closing some older cases. We are not receiving this issue in our Dev environment. Is there a way for me to determine what script this error message is referring to? 'Unable to find Script with ID ...
Posted By PAUL FORMOSA Fri October 07, 2022 02:19 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hello team, I am working with our mail team to configure SOAR and exchange. The mail team has asked what version of OAuth is SOAR using. I can't seem to find the OAuth version in the SOAR documentation. Would appreciate if it can shared here. Thanks ------------------------------ Paul Formosa ...
Posted By PAUL FORMOSA Mon July 05, 2021 01:43 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks Liam. ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Thu July 01, 2021 10:12 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks Ben. ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Wed June 30, 2021 02:35 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi All, Playbooks are not list as an exportable option. How does one go about moving playbooks from one SOAR instance to the next (e.g. Dev to Test to Prod). Thanks ------------------------------ Paul Formosa ------------------------------
Posted By PAUL FORMOSA Sat June 26, 2021 01:49 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi All, I have a date picker field as a column in a table. Is there a way to have this field default to "today's" date? Would like to have it preset for users whenever they add a row. Thanks ------------------------------ Paul Formosa ------------------------------
Posted By PAUL FORMOSA Thu June 03, 2021 10:04 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks Ben. ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Wed June 02, 2021 03:23 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
@Ben Lurie, is there a time estimate as to when the condition points will be available? We're in the midst of creating/redoing our playbooks through the Playbook designer interface and if the release is close it may be worthwhile waiting. ------------------------------ PAUL FORMOSA ------------ ...
Posted By PAUL FORMOSA Wed May 19, 2021 09:10 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi et al., thanks for reponses. Ben, I will try your suggestion. Thanks. ​ ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Tue May 18, 2021 10:25 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi Ben, it would be preferable in a script. Meaning if artifact is created and the related incident count is greater than zero, I would like to notify the owner of the incident of this fact. I am finding that the owners are not checking for the status of the related incident count. ------------------------------ ...
Posted By PAUL FORMOSA Mon May 17, 2021 02:29 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi All, Does some one have a snipet of code that exposes the Artifact Related Incident value? I would like to be able to trigger a notification when there's an artifact match in another incident. ------------------------------ Thanks Paul Formosa ------------------------------
Posted By PAUL FORMOSA Tue July 28, 2020 11:46 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thankyou Elizabeth. ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Thu June 18, 2020 02:32 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hello, I'm configuring an inbound email connection using Exchange. Does anyone know which protocol Resilient is using/expecting e.g. MAPI, EAS? Thanks ------------------------------ Paul Formosa ------------------------------
Posted By PAUL FORMOSA Fri November 22, 2019 09:22 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks. ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Thu November 21, 2019 09:00 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hello, I have been using a workflow with a timer on a specific task that executes a script on a weekly bases (repeatable forever while the task is open) to change a field value that triggers a notification to the incident owner reminding them that the task is still open. This was working until one ...
Posted By PAUL FORMOSA Thu April 18, 2019 11:42 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks Sean. ------------------------------ PAUL FORMOSA ------------------------------
Posted By PAUL FORMOSA Thu April 11, 2019 02:11 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi All, Is there a way to reference an attachment in a 'Note' so that when you click on the note-reference the attachment will launch. Use Case: Some investigations result in an incident having many-many attachments. Investigators are making 'Notes' in their incident and reference an ...
Posted By PAUL FORMOSA Mon April 08, 2019 01:42 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi Brian, thanks for the quick response. I am aware of the manual termination method. I am wondering if there's a way to terminate the workflow through rules or scripts. The scenario is that I want to start a new/different workflow when a certain condition is met and stop/terminate the 'original' ...
Posted By PAUL FORMOSA Mon April 08, 2019 12:56 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi All, Is there a way to terminate a running workflow with either a rule or script? Thanks ------------------------------ Paul Formosa ------------------------------