ThreatConnect Feed

Details
Content
Dependencies
Version History

ThreatConnect indicators feed for Cortex XSOAR TIM.

The Threat Connect feed provides access to published IOCs that contain known indicators.

What does this pack do?

Gets indicators from ThreatConnect.
Gets the owners of available indicators.

In order to access the ThreatConnect feed, you'll need to generate an access key and an API secret key. Instruction can be found here.

Integrations

Name	Description
ThreatConnect Feed	This integration fetches indicators from ThreatConnect.

Integrations

Name	Description
ThreatConnect Feed	This integration fetches indicators from ThreatConnect.

Pack Name	Pack By
Base	By: Cortex XSOAR

2.1.6 - 4845365 (March 19, 2023)

Integrations

Updated the Docker image to: demisto/python3:3.10.10.49934.

Related pull requests:
- 25363

Download

2.1.5 - 4718798 (March 1, 2023)

Integrations

ThreatConnect Feed

Updated the Docker image to: demisto/python3:3.10.10.48392.

Related pull requests:
- 24958

Download

2.1.4 - R4646022 (February 19, 2023)

Integrations

ThreatConnect Feed

Updated the Docker image to: demisto/python3:3.10.10.47713.

Related pull requests:
- 24591

Download

2.1.3 - 4384217 (January 12, 2023)

Integrations

ThreatConnect Feed

Added the indicator reputation parameter.
Updated the Docker image to: demisto/python3:3.10.9.42476.

Related pull requests:
- 23724

Download

2.1.2 - 4261791 (December 22, 2022)

Integrations

ThreatConnect Feed

Fixed an issue where no indicators were created when an error is encountered. The feed will now return a partial result if an error is encountered when running fetch-indicators.
Updated docker image to demisto/python3:3.10.9.40422.

Related pull requests:
- 23200

Download

2.1.1 - 4042228 (November 15, 2022)

Integrations

ThreatConnect Feed

Updated the Docker image to: demisto/python3:3.10.8.37233.
Fixed an issue where specifying the confidence and threatAssessScore parameters caused an error.

Related pull requests:
- 22024

Download

2.1.0 - R3917401 (October 26, 2022)

Integrations

ThreatConnect Feed

Added the following arguments to the tc-get-indicators command:
- tql_query
- indicator_type
- active_only
- confidence
- threat_assess_score
Added the following parameters:
- Tags
- indicator Type
- Group Type
- Active Only
- Retrieve Relationships
- Indicator Query
- Confidence
- Threat Assess Score Threshold
Updated the Docker image to: demisto/python3:3.10.7.35188.

Related pull requests:
- 20851

Download

2.0.0 - 3560466 (August 29, 2022)

Integrations

ThreatConnect Feed

Added support for the new v3 API.
Updated the Docker image to: demisto/python3:3.10.5.31928.

Related pull requests:
- 20469

Download

1.0.2 - 3444377 (August 11, 2022)

Integrations

ThreatConnect Feed

Updated the Docker image to: demisto/threatconnect-tcex:1.0.0.26622.
Improved implementation in calculating the Dbot score.

Related pull requests:
- 20527
- 20382

Download

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	August 30, 2020
Last Release	March 19, 2023

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.