I'm currently building a SOC+CSIRT in the company. We use JSA (Threat Management) as a SIEM.
The next step is to introduce a SOAR platform.
Who has experiences with IBM Resilient or another SOAR tool and JSA integration?
... and wants to share. 😉