IBM Security QRadar SOAR

 View Only
  • 1.  Outbound Email Attachment

    Posted Fri May 13, 2022 04:19 AM
    Hello,

    Is it a way how I can attachment some file located in SOAR or App Host for outbound email?
    I do not want to upload a file for an incident or each time upload file via wizard. I want to do it automatically.



    ------------------------------
    Alexey Fedorov
    ------------------------------


  • 2.  RE: Outbound Email Attachment

    Posted Tue May 17, 2022 10:39 AM
    Hi Alexey,

    This is not possible. The goal of outbound email is to share parts of an incident through email. 

    Regards,
    Mark

    ------------------------------
    Mark Scherfling
    ------------------------------



  • 3.  RE: Outbound Email Attachment

    Posted Tue May 17, 2022 10:53 AM
    Hello Mark,

    Thank you for the answer. Maybe is possible to make the schema:

    1. Attach a file to the Incident.
    2. Send the attachment via Email Outbound.
    3. Delete the attachment from the Incident.

    All steps perform automatically.

    My case is use an attachment as a pattern for user answer. I need to be sure that a user fill out all fields in a file and give me the file back. Use message body is not enough to me.

    ------------------------------
    Alexey Fedorov
    ------------------------------