Demisto Siem integration

Reply
Highlighted

Demisto Siem integration

Hi,

I want to add Demsito to our soc and integrate it with Qradar.

i saw that Demisto supports this integration, but i didn't find documentation on such operatation.

 

Thanks!!

Tags (2)
Highlighted
L4 Transporter

Re: Demisto Siem integration

Hi @DanielBenistiPel -


Start off by going to settings and searching for the integration.  From there, you can configure the integration and show the commands that are available. 

 

dfalcon_0-1591159676008.png

 

Also, you may get a faster response on XSOAR questions by posting to the Cortex XSOAR section.

 


David Falcon 
MDR Systems Engineer, Cortex
Palo AltoNetworks® 
Highlighted

Re: Demisto Siem integration

Thank you!

the reason i'm asking this question is that i want to know the capabilities that i will receive after that i integrate this two products.

for example can i close a case on Qradar when i closed a case on Demisto.

Highlighted
L1 Bithead

Re: Demisto Siem integration

hi,

 

in general, all integration reference documentation is located here: https://xsoar.pan.dev/docs/reference/index

Specifically, the IBM Qradar: https://xsoar.pan.dev/docs/reference/integrations/q-radar

 

Also, you can click on the "Show command" under the integration name to actually see the commands it is exposing once an instance is set up

 
Shriki
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!