Enrich X-Force threat intelligence reports with additional 3rd party sources
The right click X-Force feature on QRadar is limited to only X-Force reports. You can further enrich the information on X-Force exchange by integrating 3rd party threat intelligence sources.
- An IBM account - Sign up here https://www.ibm.com/account/profile/us?page=reg
- Sign up to any of the following 3rd party threat intelligences sources and grab the API Key:
To integrate any of the threat sources above, login to https://exchange.xforce.ibmcloud.com/. Under Settings > Integrations provide the API Key and activate.
API ID - your email address
API KEY - For RiskIQ, you can find the API key under Account settings > API Access: