Deprecated. Use the ThreatConnect v3 integration instead.
ThreatConnect
- Details
- Content
- Dependencies
- Version History
Threat intelligence platform.
Incident Types
| Name | Description |
|---|---|
ThreatConnect |
Integrations
| Name | Description |
|---|---|
| ThreatConnect v2 (Deprecated) | |
| ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
| ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Classifiers
| Name | Description |
|---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Incident Fields
| Name | Description |
|---|---|
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect AssociatedGroups | |
ThreatConnect Created By | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Associated Indicators | |
ThreatConnect Security Labels | |
ThreatConnect Victim Assets |
Layouts
| Name | Description |
|---|---|
ThreatConnect Layout |
Incident Types
| Name | Description |
|---|---|
ThreatConnect |
Integrations
| Name | Description |
|---|---|
| ThreatConnect v2 (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
| ThreatConnect v3 | ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows. |
| ThreatConnect (Deprecated) | Deprecated. Use the ThreatConnect v3 integration instead. |
Classifiers
| Name | Description |
|---|---|
Threatconnect classifier | |
Threatconnect Mapper (incoming) |
Incident Fields
| Name | Description |
|---|---|
ThreatConnect Event Date | The association to bind to the event date field from Threatconnect. |
ThreatConnect Attributes | |
ThreatConnect Group Type | The association to bind to the tpeName field from Threatconnect. |
ThreatConnect AssociatedGroups | |
ThreatConnect Created By | |
ThreatConnect Id | The association to bind to the id field from Threatconnect. |
ThreatConnect Associated Indicators | |
ThreatConnect Security Labels | |
ThreatConnect Victim Assets |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Filters And Transformers | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
Optional Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Phishing | By: Cortex XSOAR |
| Common Types | By: Cortex XSOAR |
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Filters And Transformers | By: Cortex XSOAR |
3.0.2 - 4407034 (January 16, 2023)
3.0.0 - 3649843 (September 13, 2022)
- 19793
Download
Classifiers
New: Threatconnect classifier
- Added a classifier for the fetched incidents.
- Updated the Docker image to: demisto/python3:3.10.7.33922.
Incident Fields
- ThreatConnect Event Date
- ThreatConnect Group Type
- ThreatConnect Id
- ThreatConnect Associated Indicators
- ThreatConnect AssociatedGroups
- ThreatConnect Attributes
- ThreatConnect Created By
- ThreatConnect Security Labels
- ThreatConnect Victim Assets
Incident Types
- ThreatConnect
- Added the incident type for threatconnect.
Integrations
New: ThreatConnect v3
- Added a rest API v3 support, ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows.
Layouts
- New: ThreatConnect Layout
- Added a layout for the fetched incidents.
- 19793
Download
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 23, 2020 | |
| Last Release | February 1, 2023 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
