Currently, it is not possible to change the names of rules created by the QRadar Resilient integration app without breaking their functionality. This needs to change. These currently include: close_offense qradar_note Add to QRadar Reference Se...

For certain types of tickets, an x amount of artifacts should be required. Currently, artifacts cannot be made mandatory to close out a ticket.

The ability to sync notes between QRadar and Resilient is excellent, but some Offenses involve cyber assets that are protected by federal regulations, disallowing information sharing (such as to Resilient). Creating a setting within the indivi...

Our analysts would greatly benefit if we could add a couple of fields to the per-incident data shown on mouseover of an incident on the Artifacts tab (Artifacts widget), Graph display. Currently this has fixed content, Name, ID, Phase, Severity, ...

This could be useful to use a "task instruction Template" when creating a task (either from workflow, rules or by script). This will centralized instruction description (make it manageable from the customization menu) and speedup task affectation...

A customer would like to build an automated routine that a remote SOC operator after login to the company via SSLVPN will be added to an active directory group and can logon through the LDAP mechanism to Resilient. After log off from the SSLVPN, t...

The inbuilt list of delimiters for creating multiple artefacts is fixed, this is a request for us to have the ability to use custom delimiters to seperate artefact elements, this should also allow options such as "treat consecutive delimeters as o...

Allow the business rules to reference fields in Privacy module to trigger actions or orchestrations. Use case: If Breach in Germany is checked, add task for Germany DPO. Allow business rules to populate fields in privacy module based on incident...

It would enormously improve flexibility to make selected Tabs or - better - defined field(s) on a Tab read-only. Users could be shown field data in a collated way but blocked from altering some or all fields according to business/security require...

Create a rule which sets a binary field to true for any incident that has had an analyst manually populate an artifact associated to the incident. This will allow metrics tracking around how many analysts are enriching their incidents with IOCs in...