ThreatConnect Developer Documentation
Star us on GitHub | Request a ThreatConnect Demo
Note
Find something missing or unclear in the documentation? Feel free to raise an issue in the ThreatConnect Developer Documentation repository.
Table of Contents
- Getting Started
- REST API
- Python SDK
- Java® SDK
- Getting Started with Java SDK
- Example Java App
- Deploying a Java App
- Command-Line Parameters
- The Reader Package
- Reader Class Overview
- Parameter Naming Convention
- Filtering
- AbstractGroupReaderAdapter
- Associated Groups
- Associated Indicators
- Associated Security Labels
- Associated Tags
- Associated VictimAssets
- Associated Attributes
- AbstractIndicatorReaderAdapter
- BatchReaderAdapter
- DocumentReaderAdapter
- OwnerReaderAdapter
- SecurityLabelReaderAdapter
- TagReaderAdapter Class
- TaskReaderAdapter Class
- VictimReaderAdapter Class
- Reader IP Address and Tag Example
- The Writer Package
- Writer Class Overview
- AbstractGroupWriterAdapter
- Associate Groups
- Associate Indicators
- Associate Security Labels
- Associate Tag
- Associate Victim
- Associate Victim Asset
- Add Attributes
- Update Attribute
- Create Observation
- Update False Positive
- Delete Group Association
- Delete Indicator Associations
- Delete Security Label Associations
- Delete Tag Associations
- Delete Victim Associations
- Delete VictimAsset Associations
- Delete Attribute
- AbstractIndicatorWriterAdapter
- FileIndicatorWriterAdapter
- DocumentWriterAdapter
- AbstractBatchWriterAdapter
- SecurityLabelWriterAdapter
- TagWriterAdapter
- TaskWriterAdapter
- VictimWriterAdapter
- Writer Examples
- Writer Update Example
- Writer Add Attribute Example
- Writer Associate Indicator Example
- Writer Associate Group Example
- Writer Associate Tag Example
- Writer Associate Victim Example
- Writer Remove Association Example
- JavaScript® SDK
- Getting Started
- Example JavaScript App
- Developing a JavaScript App
- Optional Properties
- ThreatConnect Parameters
- Authentication
- Dependencies Installation (Linux)
- Indicator Retrieve
- Tags Retrieve
- Owners Retrieve
- Group Retrieve
- Security Labels Retrieve
- Retrieve Associations
- Retrieve Attributes
- Retrieve Tags
- Retrieve Security Labels
- Retrieve Tasks
- Retrieve Victims
- Indicator Commit
- Group Commit
- Task Commit
- Victim Commit
- Manual API Calls
- Helper Functions
- App-Deployment Configuration File
- ThreatConnect App Framework (TcEx)
- Overview
- Features
- Building Apps: Quick Start
- Building Apps: Templates (tcinit)
- Building Apps: Dependencies (tclib)
- Building Apps: Packaging (tcpackage)
- App-Deployment Configuration
- App-Directory Structure
- .gitignore (optional)
- .pre-commit-config.yaml (optional)
- README.md (required)
- __main__.py (required)
- app.py (required)
- args.py (required)
- install.json (required)
- log (temporary)
- log/app.log (temporary)
- log/message.tc (temporary)
- log/run.log (temporary)
- playbook_app.py (required)
- pyproject.toml (optional)
- requirements.txt (required)
- run.py (required)
- setup.cfg (optional)
- tcex.json (required)
- Module: Batch
- Module: Cache
- Module: Case Management
- Module: Datastore
- Module: Decorators
- Module: Metrics
- Module: Notifications
- Module: Playbooks
- Module: Services
- Module: Threat Intelligence
- Module: Utils
- Authorization (Token/HMAC)
- Exit
- Examples
- Logging
- Message TC
- Parser/Args
- Proxies
- Results TC
- Release Notes
- TcEx Package
- Indices and tables
- Common Errors
- Angular SDKs
- Trademarks