Python SDK

DEPRECATION NOTICE: This module has been deprecated and is now replaced with the https://github.com/ThreatConnect-Inc/tcex module. To work with the ThreatConnect REST API, see the documents on the TcEx Threat Intelligence module (https://threatconnect-inc.github.io/tcex/module_ti.html). For Apps written outside of ThreatConnect Exchange, see the section on External App Templates (https://threatconnect-inc.github.io/tcex/building_apps_tcinit.html#external-app-templates).

Table of Contents

• Quick Start
  • Installation
  • Configuration
  • What hath God wrought! (a.k.a. Hello World)
  • Standard Script Heading
  • Next Steps
• Groups
  • Groups Overview
  • Filtering Groups
  • Generic Group Retrieval
  • Adversaries
  • Campaigns
  • Documents
  • Emails
  • Incidents
  • Signatures
  • Threats
  • Group Associations
  • Group Metadata
• Indicators
  • Indicators Overview
  • Filtering Indicators
  • Email Addresses
  • Files
  • Hosts
  • IP Addresses
  • URLs
  • Custom Indicators
  • Indicator Associations
  • Indicator Metadata
  • Bulk Indicator Download
  • Batch Commit
• Owners
  • Retrieve Owners
  • Retrieve Owner Metrics
• Tasks
  • Filtering Tasks
  • Retrieve Tasks
  • Create Tasks
  • Update Tasks
  • Delete Tasks
  • Task Associations
  • Task Metadata
• Victims
  • Filtering Victims
  • Retrieve Victims
  • Create Victims
  • Update Victims
  • Delete Victims
  • Victim Associations
  • Victim Metadata
  • Victim Assets
• Advanced Python Functionality
  • Logging
  • Activity Log
  • API Request Timeout
  • API Retries/Sleep Period
  • API Result Limit
  • Proxies
  • Advanced Filtering
  • Manual API Calls
  • Downloading Document Contents
  • Creating and Uploading Documents
  • Advanced Outputs Formats
  • Indicator Type Override
  • Regex Overrides
  • Reporting
  • Gotchas