ThreatConnect Deprecated

Deprecated. Use the ThreatConnect v3 integration instead.

Data Enrichment & Threat Intelligence · ThreatConnect

Configuration parameters

  • accessId — Access ID (required)
  • secretKey — Secret Key (required)
  • baseUrl — baseUrl (required)
  • defaultOrg — Default Organization
  • proxyIp — ProxyIP (or http://${ip} )
  • proxyPort — ProxyPort
  • rating — Rating threshold for Malicious Indicators
  • confidence — Confidence threshold for Malicious Indicators
  • freshness — Indicator Reputation Freshness (in days)

Commands (38)

  • domain Deprecated

    Searches for an indicator of type domain.

  • file Deprecated

    Searches for an indicator of type file.

  • ip Deprecated

    Searches for an indicator of type IP address.

  • tc-add-group-attribute Deprecated

    Adds an attribute to a specified group.

  • tc-add-group-security-label Deprecated

    Adds a security label to a group.

  • tc-add-group-tag Deprecated

    Adds tags to a specified group.

  • tc-add-indicator Deprecated

    Adds a new indicator to ThreatConnect.

  • tc-associate-group-to-group Deprecated

    Associates one group with another group.

  • tc-create-campaign Deprecated

    Creates a group based on the "Campaign" type.

  • tc-create-document-group Deprecated

    Creates a document group.

  • tc-create-event Deprecated

    Creates a group based on the "Event" type.

  • tc-create-incident Deprecated

    Creates a new incident group.

  • tc-create-threat Deprecated

    Creates a group based on the "Threats" type.

  • tc-delete-group Deprecated

    Deletes a group.

  • tc-delete-indicator Deprecated

    Deletes an indicator from ThreatConnect.

  • tc-delete-indicator-tag Deprecated

    Removes a tag from a specified indicator.

  • tc-download-document Deprecated

    Downloads the contents of a document.

  • tc-fetch-incidents Deprecated

    Fetches incidents from ThreatConnect.

  • tc-get-associated-groups Deprecated

    Returns indicators associated with a specified group.

  • tc-get-events Deprecated

    Returns a list of events.

  • tc-get-group Deprecated

    Retrieves a single group.

  • tc-get-group-attributes Deprecated

    Retrieves the attribute of a group.

  • tc-get-group-indicators Deprecated

    Returns indicators associated with a group.

  • tc-get-group-security-labels Deprecated

    Retrieves the security labels of a group.

  • tc-get-group-tags Deprecated

    Retrieves the tags of a group.

  • tc-get-groups Deprecated

    Returns all groups, filtered by the group type.

  • tc-get-incident-associate-indicators Deprecated

    Returns indicators that are related to a specific incident.

  • tc-get-indicator Deprecated

    Retrieves information about an indicator.

  • tc-get-indicator-types Deprecated

    Returns all indicator types available.

  • tc-get-indicators-by-tag Deprecated

    Fetches all indicators that have a tag.

  • tc-get-tags Deprecated

    Returns a list of all ThreatConnect tags.

  • tc-group-associate-indicator Deprecated

    Associates an indicator with a group.

  • tc-incident-associate-indicator Deprecated

    Associates an indicator with an existing incident. The indicator must exist before running this command. To add an indicator, run the tc-add-indicator command.

  • tc-indicators Deprecated

    Retrieves a list of all indicators.

  • tc-owners Deprecated

    Retrieves all owners for the current account.

  • tc-tag-indicator Deprecated

    Adds a tag to an existing indicator.

  • tc-update-indicator Deprecated

    Updates the indicator in ThreatConnect.

  • url Deprecated

    Searches for an indicator of type URL.