IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

How to call QRadar details from SOAR incident in playbook function/script

  • 1.  How to call QRadar details from SOAR incident in playbook function/script

    Posted Fri February 23, 2024 11:51 AM

    Trying to pull the QRadar offense index, whether it's an IP, URL, hostname, and use that information to query our CMDB. 

    I've looked but have been unable to find any documentation on how to do this, and the QRadar app doesn't seem to have a way to call it natively. 

    Has anyone managed this? 



    ------------------------------
    Dylan Diamond
    ------------------------------