The ThreatQ Functions App for IBM Security SOAR gives IR teams the ability to leverage ThreatQ to enrich incidents and artifacts with your curated and prioritized threat intelligence data.

The app provides a set of functions that allow users to interact with ThreatQ including, but not limited to:

• searching for indicators
• adding attributes
• exporting incidents

The app also includes a set of playbooks that demonstrate how to use these functions to get your IR team the information they need to make efficient decisions.