IBM Security QRadar SOAR

 View Only

Inbound Email Processing - Script issue

  • 1.  Inbound Email Processing - Script issue

    Posted Fri July 01, 2022 12:54 AM
    Good morning everyone,
    I am using IBM Resilient v40.2, and with email integration for ingesting emails and incident creation, I am using the genrice email script python 2 based version with little edits.

    I am having a strange behavior with the whitelisting, I just added couple of basic private ranges to the IPv4 whitelist, and still getting private IPs from same exact ranges, created as artifacts with every new email.

    Any Ideas what could be the reason, and possible fixes.
    Appreciate your support.



    ------------------------------
    ahmed abushanab
    ------------------------------