The IBM QRadar SOAR action allows updating events from ThreatQ to your Resilient instance. It has the ability to push new indicators and comments from updated Resilient events in ThreatQ to Resilient as artifacts and comments, respectively.

The integration provides the following action:

• IBM QRadar SOAR - Update Events - pushes indicators and comments from updated Resilient events in ThreatQ to Resilient.

The action is compatible with event object types.

Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.