The association to bind to the event date field from Threatconnect.
ThreatConnect
- Details
- Content
- Dependencies
- Version History
Threat intelligence platform.
Name | Description |
---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Name | Description |
---|---|
ThreatConnect AssociatedGroups | |
ThreatConnect Event Date | |
ThreatConnect Victim Assets | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect Associated Indicators | |
ThreatConnect Created By | |
ThreatConnect Security Labels |
Name | Description |
---|---|
ThreatConnect |
Name | Description |
---|---|
ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
Name | Description |
---|---|
ThreatConnect Layout |
Name | Description |
---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Name | Description |
---|---|
ThreatConnect Victim Assets | |
ThreatConnect Associated Indicators | |
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect AssociatedGroups | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect Created By | |
ThreatConnect Security Labels | |
ThreatConnect Attributes |
Name | Description |
---|---|
ThreatConnect |
Name | Description |
---|---|
ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Filters And Transformers | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Common Types | By: Cortex XSOAR |
Phishing | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Filters And Transformers | By: Cortex XSOAR |
Integrations
ThreatConnect v3
- Added new commands to support victims:
- tc-create-victim
- tc-update-victim
- tc-delete-victim
- tc-list-victims
- tc-create-victim-asset
- tc-update-victim-asset
- tc-delete-victim-asset
- tc-list-victim-assets
- tc-create-victim-attribute
- tc-update-victim-attribute
- tc-delete-victim-attribute
- tc-list-victim-attributes
- Removed the description argument from the tc-add-indicator command as it was not supported by the API.
- Added the associated_victim_asset_id argument to the tc-update-group command.
- Updated the Docker image to: demisto/python3:3.10.13.84405.
- 31908
Download
Integrations
ThreatConnect v3
- Updated the Docker image to: demisto/python3:3.10.12.63474.
- Added the fields_to_return argument to the tc-get-indicators-by-tag, tc-get-indicator and tc-indicators commands.
This will allow specifying additional fields to return as part of the result. - Cleaned the integration code from unused functionalities.
- 27257
Download
Integrations
ThreatConnect v3
- Added new argument owner_name to the tc-create-event command.
- Removed unnecessary description argument from the tc-create-event command since it is not supported in the API.
- Updated the Docker image to: demisto/python3:3.10.10.50695.
- 25485
Download
PUBLISHER
PLATFORMS
INFO
Certification | Certified | Read more |
Supported By | Cortex | |
Created | July 23, 2020 | |
Last Release | April 16, 2024 |