Skip to main content
Triggers a workflow on every new offense captured by Qradar. Endpoint: /api/siem/offenses
Workflows with this trigger check for new events every 5 minutes by default. You can adjust this interval in the Trigger settings.

Sample Event