The association to bind to the event date field from Threatconnect.
ThreatConnect
- Details
- Content
- Dependencies
- Version History
Threat intelligence platform.
Classifiers
| Name | Description |
|---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Incident Fields
| Name | Description |
|---|---|
ThreatConnect Attributes | |
ThreatConnect Associated Indicators | |
ThreatConnect Event Date | |
ThreatConnect Security Labels | |
ThreatConnect Victim Assets | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect AssociatedGroups | |
ThreatConnect Created By |
Incident Types
| Name | Description |
|---|---|
ThreatConnect |
Integrations
| Name | Description |
|---|---|
| ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
| ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
| ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Layouts
| Name | Description |
|---|---|
ThreatConnect Layout |
Classifiers
| Name | Description |
|---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Incident Fields
| Name | Description |
|---|---|
ThreatConnect AssociatedGroups | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Victim Assets | |
ThreatConnect Associated Indicators | |
ThreatConnect Security Labels | |
ThreatConnect Created By |
Incident Types
| Name | Description |
|---|---|
ThreatConnect |
Integrations
| Name | Description |
|---|---|
| ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
| ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
| ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
| Phishing | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
3.1.0 - 755215 (January 10, 2024)
- 31908
Download
Integrations
ThreatConnect v3
- Added new commands to support victims:
- tc-create-victim
- tc-update-victim
- tc-delete-victim
- tc-list-victims
- tc-create-victim-asset
- tc-update-victim-asset
- tc-delete-victim-asset
- tc-list-victim-assets
- tc-create-victim-attribute
- tc-update-victim-attribute
- tc-delete-victim-attribute
- tc-list-victim-attributes
- Removed the description argument from the tc-add-indicator command as it was not supported by the API.
- Added the associated_victim_asset_id argument to the tc-update-group command.
- Updated the Docker image to: demisto/python3:3.10.13.84405.
- 31908
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 23, 2020 | |
| Last Release | November 11, 2024 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
