ThreatConnect Feed
This integration fetches indicators from ThreatConnect.
Data Enrichment & Threat Intelligence · ThreatConnect Feed · Feed
Configuration parameters
tc_api_path— Base URL (required)api_credentials— Access ID (required)api_access_id— Access IDapi_secret_key— Secret keyfetch_limit— Indicators to get per fetchtags— Tags to filter results byowners— OwnersfeedIncremental— Incremental feedfeed— Fetch indicatorsfeedReputation— Indicator ReputationfeedReliability— Source Reliability (required)tlp_color— Traffic Light Protocol Colorindicator_type— Indicator typesgroup_type— Group typesindicator_active— Active Indicators OnlycreateRelationships— Create Relationshipsindicator_query— Indicator Queryuse_indicator_query_for_group— Use Indicator Query For Groupgroup_query— Group Queryconfidence— Confidence Thresholdthreat_assess_score— Threat Assess Score ThresholdfeedExpirationPolicy—feedExpirationInterval—feedFetchInterval— Feed Fetch Intervalinsecure— Trust any certificate (not secure)feedBypassExclusionList— Bypass exclusion listfeedTags— Tags
Commands (2)
-
tc-get-indicatorsGets indicators from ThreatConnect.
-
tc-get-ownersGets available indicators owners.