IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Outbound Email Attachment

    Posted Fri May 13, 2022 04:19 AM
    Hello,

    Is it a way how I can attachment some file located in SOAR or App Host for outbound email?
    I do not want to upload a file for an incident or each time upload file via wizard. I want to do it automatically.



    ------------------------------
    Alexey Fedorov
    ------------------------------


  • 2.  RE: Outbound Email Attachment

    Posted Tue May 17, 2022 10:39 AM
    Hi Alexey,

    This is not possible. The goal of outbound email is to share parts of an incident through email. 

    Regards,
    Mark

    ------------------------------
    Mark Scherfling
    ------------------------------



  • 3.  RE: Outbound Email Attachment

    Posted Tue May 17, 2022 10:53 AM
    Hello Mark,

    Thank you for the answer. Maybe is possible to make the schema:

    1. Attach a file to the Incident.
    2. Send the attachment via Email Outbound.
    3. Delete the attachment from the Incident.

    All steps perform automatically.

    My case is use an attachment as a pattern for user answer. I need to be sure that a user fill out all fields in a file and give me the file back. Use message body is not enough to me.

    ------------------------------
    Alexey Fedorov
    ------------------------------