Discussion: Send email to user with #xsoar link for them to upload files?

[mfaridsh]

Is there a way to allow users to upload files to #xsoar incident via outlook email integration?

example. Malware incident triggered from user's endpoint. soar sends an email to user stating they have detected a malware on their device. please zip the file and upload the file to xsoar using the link.

Regards,

Farid

[mfaridsh · Accepted solution]

Solved: Create an incident field with type attachment. 

Create a xsoar playbook data collection task. Under the message tab, add the recipient to send the email to. Under the questions tab, + add question based on field and include the newly created attachment incident field.