The association to bind to the tpeName field from Threatconnect.
ThreatConnect
- Details
- Content
- Dependencies
- Version History
Threat intelligence platform.
Name | Description |
---|---|
Threatconnect Mapper (incoming) | |
Threatconnect classifier |
Name | Description |
---|---|
ThreatConnect |
Name | Description |
---|---|
ThreatConnect Security Labels | |
ThreatConnect Group Type | |
ThreatConnect Created By | |
ThreatConnect Associated Indicators | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Victim Assets | |
ThreatConnect AssociatedGroups |
Name | Description |
---|---|
ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
Name | Description |
---|---|
ThreatConnect Layout |
Name | Description |
---|---|
Threatconnect Mapper (incoming) | |
Threatconnect classifier |
Name | Description |
---|---|
ThreatConnect |
Name | Description |
---|---|
ThreatConnect Security Labels | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect Created By | |
ThreatConnect Associated Indicators | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Victim Assets | |
ThreatConnect AssociatedGroups |
Name | Description |
---|---|
ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Filters And Transformers | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Common Types | By: Cortex XSOAR |
Phishing | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Filters And Transformers | By: Cortex XSOAR |
Integrations
ThreatConnect v3
- Added new argument owner_name to the tc-create-event command.
- Removed unnecessary description argument from the tc-create-event command since it is not supported in the API.
- Updated the Docker image to: demisto/python3:3.10.10.50695.
- 25485
Download
Classifiers
New: Threatconnect classifier
- Added a classifier for the fetched incidents.
- Updated the Docker image to: demisto/python3:3.10.7.33922.
Incident Fields
- ThreatConnect Event Date
- ThreatConnect Group Type
- ThreatConnect Id
- ThreatConnect Associated Indicators
- ThreatConnect AssociatedGroups
- ThreatConnect Attributes
- ThreatConnect Created By
- ThreatConnect Security Labels
- ThreatConnect Victim Assets
Incident Types
- ThreatConnect
- Added the incident type for threatconnect.
Integrations
New: ThreatConnect v3
- Added a rest API v3 support, ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows.
Layouts
- New: ThreatConnect Layout
- Added a layout for the fetched incidents.
- 19793
Download
PUBLISHER
PLATFORMS
INFO
Certification | Certified | Read more |
Supported By | Cortex | |
Created | July 23, 2020 | |
Last Release | May 2, 2023 |
WORKS WITH THE FOLLOWING INTEGRATIONS:


