IBM Security QRadar SOAR

 View Only
  • 1.  Mcafee TIE exchange new feature integration

    Posted Wed May 31, 2023 04:55 AM
    Hi IBM community,

    I have come across an update from Mcafee TIE for their new features that makes setting hash reputation easier by using xml file to define the hash reputation. Basically, the xml will contain the value necessary to be correlated with the hash value similar to current mcafee set reputation functionality but with the option to add multiple of them at once instead of one by one.
     

    More details on the explanation on the link provided below:

    https://kcm.trellix.com/corporate/index?page=content&id=KB87695
     
    https://kcm.trellix.com/corporate/index?page=content&id=KB84116

    Is there currently an ability to do using the current mcafee package?


    ------------------------------
    Luqman Nur
    Techlab
    ------------------------------


  • 2.  RE: Mcafee TIE exchange new feature integration

    Posted Thu June 01, 2023 08:43 AM

    No this is not currently a feature in our McAfee TIE integration.



    ------------------------------
    Richard Swierk
    ------------------------------