SNOW SIR (Security Incident Response) integration with Splunk Phantom

[CarlV1]

A few questions...

We are planning to use SNOW SIR (Security Incident Response) as our new Case Management / Ticketing System and we also have SOAR tool, Splunk Phantom.

1. What would be the best approach to integrate the two?

2. Do you have an available Splunk Phantom App for SNOW SIR (ServiceNow is available but not SNOW SIR)?

3. Where can I get the SNOW SIR api documentation?

Thanks in advance.

[Chris McDevitt · Accepted solution]

Do not forget to mark this as the "Correct" answer. 

🙂