Skip to main content

ThreatConnect

Details
Content
Dependencies
Version History

Download With Dependencies

Threat intelligence platform.

Classifiers

Name	Description
Threatconnect Mapper (incoming)
Threatconnect classifier

Incident Types

Name	Description
ThreatConnect

Incident Fields

Name	Description
ThreatConnect Security Labels
ThreatConnect Group Type	The association to bind to the tpeName field from Threatconnect.
ThreatConnect Created By
ThreatConnect Associated Indicators
ThreatConnect Id	The association to bind to the id field from Threatconnect.
ThreatConnect Event Date	The association to bind to the event date field from Threatconnect.
ThreatConnect Attributes
ThreatConnect Victim Assets
ThreatConnect AssociatedGroups

Integrations

Name	Description
ThreatConnect v2 (Deprecated)	Deprecated. Use the ThreatConnect v3 integration instead.
ThreatConnect (Deprecated)	Deprecated. Use the ThreatConnect v3 integration instead.
ThreatConnect v3	ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows.

Layouts

Name	Description
ThreatConnect Layout

Classifiers

Name	Description
Threatconnect Mapper (incoming)
Threatconnect classifier

Incident Types

Name	Description
ThreatConnect

Incident Fields

Name	Description
ThreatConnect Security Labels
ThreatConnect Group Type	The association to bind to the tpeName field from Threatconnect.
ThreatConnect Created By
ThreatConnect Associated Indicators
ThreatConnect Id	The association to bind to the id field from Threatconnect.
ThreatConnect Event Date	The association to bind to the event date field from Threatconnect.
ThreatConnect Attributes
ThreatConnect Victim Assets
ThreatConnect AssociatedGroups

Integrations

Name	Description
ThreatConnect v2 (Deprecated)	Deprecated. Use the ThreatConnect v3 integration instead.
ThreatConnect (Deprecated)	Deprecated. Use the ThreatConnect v3 integration instead.
ThreatConnect v3	ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (2)

Pack Name	Pack By
Common Types	By: Cortex XSOAR
Phishing	By: Cortex XSOAR

All level dependencies (1)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR

3.0.4 - R5170573 (May 2, 2023)

Integrations

ThreatConnect v3

Added new argument owner_name to the tc-create-event command.
Removed unnecessary description argument from the tc-create-event command since it is not supported in the API.
Updated the Docker image to: demisto/python3:3.10.10.50695.

Related pull requests:
- 25485

Download

3.0.3 - R4718798 (March 1, 2023)

Layouts

ThreatConnect Layout
This item is no longer supported in XSIAM.

Related pull requests:
- 24223

Download

3.0.2 - 4407034 (January 16, 2023)

Integrations

ThreatConnect (Deprecated)

Deprecated. Use the ThreatConnect v3 integration instead.

ThreatConnect v2 (Deprecated)

Deprecated. Use the ThreatConnect v3 integration instead.
Updated the Docker image to: demisto/threatconnect-py3-sdk:1.0.0.40378.

Related pull requests:
- 23261

Download

3.0.1 - 3720747 (September 24, 2022)

Integrations

ThreatConnect v3

Added support for get indicators by summary.

Related pull requests:
- 21403

Download

3.0.0 - 3649843 (September 13, 2022)

Classifiers

New: Threatconnect classifier

Added a classifier for the fetched incidents.
Updated the Docker image to: demisto/python3:3.10.7.33922.

Incident Fields

ThreatConnect Event Date
ThreatConnect Group Type
ThreatConnect Id
ThreatConnect Associated Indicators
ThreatConnect AssociatedGroups
ThreatConnect Attributes
ThreatConnect Created By
ThreatConnect Security Labels
ThreatConnect Victim Assets

Incident Types

ThreatConnect
Added the incident type for threatconnect.

Integrations

New: ThreatConnect v3

Added a rest API v3 support, ThreatConnect's integration is a intelligence-driven security operations solution with intelligence, automation, analytics, and workflows.

Layouts

New: ThreatConnect Layout
Added a layout for the fetched incidents.

Related pull requests:
- 19793

Download

2.0.19 - 3326856 (July 25, 2022)

Integrations

ThreatConnect v2

Fixed an issue where the ip command returned incorrect data.

Related pull requests:
- 19746

Download

2.0.18 - 3083568 (June 13, 2022)

Integrations

ThreatConnect v2

Added the limit argument to tc-get-indicators-by-tag command.

Related pull requests:
- 19499

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 23, 2020
Last Release	May 2, 2023

WORKS WITH THE FOLLOWING INTEGRATIONS:

ThreatConnect (Deprecated)

ThreatConnect v2 (Deprecated)

ThreatConnect v3

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.