Threat Crowd (Deprecated)

Details
Content
Dependencies
Version History

Deprecated. No available replacement.

Use the integration in this content pack to query Threat Crowd for reports on:

IP addresses
Domains
Emails
Antiviruses
File hashes

The report indicates if the input (IP address, domain, etc.) is malicious, and includes additional information to aid in your mitigation of threats to your network.

Use the integration in this content pack to query Threat Crowd for reports on:

IP addresses
Domains
Emails
Antiviruses
File hashes

The report indicates if the input (IP address, domain, etc.) is malicious, and includes additional information to aid in your mitigation of threats to your network.

Integrations

Name	Description
Threat Crowd v2 (Deprecated)	Deprecated. No available replacement.
Threat Crowd (Deprecated)	Deprecated. Use Threat Crowd v2 instead.

Integrations

Name	Description
Threat Crowd v2 (Deprecated)	Deprecated. No available replacement.
Threat Crowd (Deprecated)	Deprecated. Use Threat Crowd v2 instead.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Aggregated Scripts	By: Cortex XSOAR

2.0.10 - 7843807 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

2.0.9 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

2.0.8 - R3980324 (June 26, 2025)

Integrations

Threat Crowd v2 (Deprecated)

Deprecated. Service is down, no available replacement.

Related pull requests:
- 21731

Download

2.0.7 - 3243583 (July 11, 2022)

Integrations

Threat Crowd v2

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.5.31797.

Related pull requests:
- 19659

Download

2.0.6 - R2411339 (February 14, 2022)

Integrations

Threat Crowd v2

Updated the Docker image to: demisto/python3:3.9.8.24399.

Download

2.0.5 - 7740378 (September 23, 2021)

Integrations

Threat Crowd v2

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

2.0.4 - 386916 (June 20, 2021)

Integrations

Threat Crowd v2

Fixed an issue where the ip command failed when 'references' value is missing from server response.

Download

2.0.3 - 383719 (June 13, 2021)

Integrations

Threat Crowd v2

Fixed an issue where a response with no results returned an error in the ip command.
Updated the Docker image to: demisto/python3:3.9.5.21272.

Download

2.0.2 - R373483 (June 1, 2021)

Integrations

Threat Crowd v2

Upgraded the Docker image to: demisto/python3:3.9.5.20070.

Download

2.0.1 - R373483 (June 1, 2021)

Integrations

Threat Crowd (Deprecated)

Deprecated. Use the Threat Crowd v2 integration instead.

New: Threat Crowd v2

Query Threat Crowd for reports. (Available from Cortex XSOAR 5.0.0).
Breaking Changes: Changed the following command names from the deprecated integration:
- threat-crowd-ip is now ip
- threat-crowd-file is now file
- threat-crowd-email is now email
- threat-crowd-domain is now domain

Threat Crowd v2

Maintenance and stability enhancements.

Download

1.0.0 - 351790 (November 9, 2020)

Query threat crowd for reports.

Download

2.0.10 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

2.0.9 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

2.0.8 - R3980324 (June 26, 2025)

Integrations

Threat Crowd v2 (Deprecated)

Deprecated. Service is down, no available replacement.

Related pull requests:
- 21731

Download

2.0.7 - 3243583 (July 11, 2022)

Integrations

Threat Crowd v2

Removed excessive error traceback printing.
Updated the Docker image to: demisto/python3:3.10.5.31797.

Related pull requests:
- 19659

Download

2.0.6 - R2411339 (February 14, 2022)

Integrations

Threat Crowd v2

Updated the Docker image to: demisto/python3:3.9.8.24399.

Download

2.0.5 - 7740378 (September 23, 2021)

Integrations

Threat Crowd v2

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

2.0.4 - 386916 (June 20, 2021)

Integrations

Threat Crowd v2

Fixed an issue where the ip command failed when 'references' value is missing from server response.

Download

2.0.3 - 383719 (June 13, 2021)

Integrations

Threat Crowd v2

Fixed an issue where a response with no results returned an error in the ip command.
Updated the Docker image to: demisto/python3:3.9.5.21272.

Download

2.0.2 - R373483 (June 1, 2021)

Integrations

Threat Crowd v2

Upgraded the Docker image to: demisto/python3:3.9.5.20070.

Download

2.0.1 - R373483 (June 1, 2021)

Integrations

Threat Crowd (Deprecated)

Deprecated. Use the Threat Crowd v2 integration instead.

New: Threat Crowd v2

Query Threat Crowd for reports. (Available from Cortex XSOAR 5.0.0).
Breaking Changes: Changed the following command names from the deprecated integration:
- threat-crowd-ip is now ip
- threat-crowd-file is now file
- threat-crowd-email is now email
- threat-crowd-domain is now domain

Threat Crowd v2

Maintenance and stability enhancements.

Download

1.0.0 - 351790 (November 9, 2020)

Query threat crowd for reports.

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 9, 2020
Last Release	March 22, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.