Deprecated. Use the ThreatConnect v3 integration instead.
ThreatConnect
- Details
- Content
- Dependencies
- Version History
Threat intelligence platform.
Name | Description |
---|---|
ThreatConnect |
Name | Description |
---|---|
ThreatConnect v2 (Deprecated) | |
ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Name | Description |
---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Name | Description |
---|---|
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect AssociatedGroups | |
ThreatConnect Created By | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Associated Indicators | |
ThreatConnect Security Labels | |
ThreatConnect Victim Assets |
Name | Description |
---|---|
ThreatConnect Layout |
Name | Description |
---|---|
ThreatConnect |
Name | Description |
---|---|
ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Name | Description |
---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Name | Description |
---|---|
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect AssociatedGroups | |
ThreatConnect Created By | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Associated Indicators | |
ThreatConnect Security Labels | |
ThreatConnect Victim Assets |
Pack Name | Pack By |
---|---|
Filters And Transformers | By: Cortex XSOAR |
Base | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Phishing | By: Cortex XSOAR |
Common Types | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Filters And Transformers | By: Cortex XSOAR |
Classifiers
New: Threatconnect classifier
- Added a classifier for the fetched incidents.
- Updated the Docker image to: demisto/python3:3.10.7.33922.
Incident Fields
- ThreatConnect Event Date
- ThreatConnect Group Type
- ThreatConnect Id
- ThreatConnect Associated Indicators
- ThreatConnect AssociatedGroups
- ThreatConnect Attributes
- ThreatConnect Created By
- ThreatConnect Security Labels
- ThreatConnect Victim Assets
Incident Types
- ThreatConnect
- Added the incident type for threatconnect.
Integrations
New: ThreatConnect v3
- Added a rest API v3 support, ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows.
Layouts
- New: ThreatConnect Layout
- Added a layout for the fetched incidents.
- 19793
Download
PUBLISHER
Cortex
PLATFORMS
INFO
Certification | Certified | Read more |
Supported By | Cortex | |
Created | July 23, 2020 | |
Last Release | February 1, 2023 |
WORKS WITH THE FOLLOWING INTEGRATIONS:


