Forward ICDx events to IBM Resilient

Products

• ICDx

Issue/Introduction

 

Resolution

GOAL: Forward events from Integrated Cyber Defense eXchange (ICDx) to IBM Resilient.

 

Steps:

1. In ICDx UI, on Configuration> Forwarders, add an AMQP forwarder which points to the IBM Resilient instance.
2. On Settings> API Keys, create an API Key.
3. From IBM, download and install the Symantec ICDx Content Pack For Resilient, here:
   https://exchange.xforce.ibmcloud.com/hub/extension/811158e63308075ba4d4e19c779e8cfe
    
4. Install the ICDx Content Pack for Resilient into Resilient

 

NOTE: Reaching this resource may require an IBMid.