Community driven repository of Playbooks and Apps for ThreatConnect.
-
Updated
Jul 30, 2024 - Python
Community driven repository of Playbooks and Apps for ThreatConnect.
ThreatConnect Developer Documentation: https://docs.threatconnect.com/
ThreatConnect Exchange App Framework Templates
Cuckoo reporting module for version 1.2 stable
Helpful paradigms and constructs for creating effective and maintainable ThreatConnect Playbooks: https://pb-constructs.hightower.space/playbooks/
Cookiecutter template for quickly making quality spaces apps for ThreatConnect.
Script utilities, programming snippets, and configs for using the ThreatConnect API, and analysis.
Web app to calculate "indicators of compromise" confidence deprecation timelines (used with threat intel platforms such as ThreatConnect).
ThreatConnect playbook checking if a URL has been archived in the wayback machine.
Sublime Text snippets for writing scripts in less than 60 seconds that use ThreatConnect's Python SDK.
A script to create every available object in ThreatConnect.
A management tool for sending Abnormal email threat intelligence to ThreatConnect
Sublime Text snippets for writing scripts that use ThreatConnect's TCEX module.
Cookiecutter template for quickly creating quality spaces apps for ThreatConnect.
ThreatConnect playbook to read a Google Alerts RSS feed and create indicators from the links.
ThreatConnect Playbook app for reading the contents of a PDF.
"Yet another ThreatConnect client" ("Yah-tzee"). A simple, barebones, CTI data-focused ThreatConnect API client.
Spaces app to create links to indicators which are associated with a given group.
Add a description, image, and links to the threatconnect topic page so that developers can more easily learn about it.
To associate your repository with the threatconnect topic, visit your repo's landing page and select "manage topics."