Python SDK

Attention

DEPRECATION NOTICE: This module has been deprecated and is now replaced with the ThreatConnect TcEx App Framework. For instruction on working with the ThreatConnect REST API in TcEx, see the Module: Threat Intelligence documentation. For instruction on writing Apps outside of TcEx, see the Building Apps: External App documentation.

Table of Contents

• Quick Start
  • Installation
  • Configuration
  • What hath God wrought! (a.k.a. Hello World)
  • Standard Script Heading
  • Next Steps
• Groups
  • Groups Overview
  • Filtering Groups
  • Generic Group Retrieval
  • Adversaries
  • Campaigns
  • Documents
  • Emails
  • Incidents
  • Signatures
  • Threats
  • Group Associations
  • Group Metadata
• Indicators
  • Indicators Overview
  • Filtering Indicators
  • Email Addresses
  • Files
  • Hosts
  • IP Addresses
  • URLs
  • Custom Indicators
  • Indicator Associations
  • Indicator Metadata
  • Bulk Indicator Download
  • Batch Commit
• Owners
  • Retrieve Owners
  • Retrieve Owner Metrics
• Tasks
  • Filtering Tasks
  • Retrieve Tasks
  • Create Tasks
  • Update Tasks
  • Delete Tasks
  • Task Associations
  • Task Metadata
• Victims
  • Filtering Victims
  • Retrieve Victims
  • Create Victims
  • Update Victims
  • Delete Victims
  • Victim Associations
  • Victim Metadata
  • Victim Assets
• Advanced Python Functionality
  • Logging
  • Activity Log
  • API Request Timeout
  • API Retries/Sleep Period
  • API Result Limit
  • Proxies
  • Advanced Filtering
  • Manual API Calls
  • Downloading Document Contents
  • Creating and Uploading Documents
  • Advanced Outputs Formats
  • Indicator Type Override
  • Regex Overrides
  • Reporting
  • Gotchas