Skip to content

Commit 1413327

Browse files
CSOAR-3980: ThreatConnect V3 Implementation (#5924)
* CSOAR-3980: Added new threatConect V3 inetgration * CSOAR-3980: Updated integration * Add to product list article --------- Co-authored-by: John Pipkin <[email protected]>
1 parent 5b80c44 commit 1413327

File tree

2 files changed

+49
-1
lines changed

2 files changed

+49
-1
lines changed

docs/integrations/product-list/product-list-m-z.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -181,7 +181,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
181181
| <img src={useBaseUrl('img/integrations/misc/tessian-logo.png')} alt="Thumbnail icon" width="50"/> | [Tessian](https://www.tessian.com/) | Partner integration: [Tessian for Sumo Logic](https://github.com/SumoLogic/sumologic-public-partner-apps/tree/master/Tessian#tessian-for-sumo-logic) |
182182
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/thehive.png')} alt="Thumbnail icon" width="75"/> | [TheHive](https://thehive-project.org/) | Automation integration: [TheHive](/docs/platform-services/automation-service/app-central/integrations/thehive/) |
183183
| <img src={useBaseUrl('img/integrations/misc/thinkst-canary-logo.png')} alt="Thumbnail icon" width="100"/> | [Thinkst Canary](https://canary.tools/) | Cloud SIEM integration: [Thinkst Canary](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/0152e233-fce6-4cbf-9edc-721d7bef94f8.md) |
184-
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="Thumbnail icon" width="100"/> | [ThreatConnect](https://threatconnect.com/) | Automation integration: [ThreatConnect](/docs/platform-services/automation-service/app-central/integrations/threatconnect/) |
184+
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="Thumbnail icon" width="100"/> | [ThreatConnect](https://threatconnect.com/) | Automation integrations: <br/>- [ThreatConnect](/docs/platform-services/automation-service/app-central/integrations/threatconnect/) <br/>- [ThreatConnect V3](/docs/platform-services/automation-service/app-central/integrations/threatconnect-v3) |
185185
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threat-crowd.png')} alt="Thumbnail icon" width="100"/> | [Threat Crowd](https://otx.alienvault.com/) | Automation integration: [Threat Crowd](/docs/platform-services/automation-service/app-central/integrations/threat-crowd/) |
186186
| <img src={useBaseUrl('img/integrations/misc/threater-logo.png')} alt="Thumbnail icon" width="75"/> | [Threater](https://www.threater.com/) | Cloud SIEM integration: [Bandura](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/ec354a4c-a761-4e18-8ceb-194d6e8692e2.md) |
187187
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threatminer.png')} alt="Thumbnail icon" width="125"/> | [ThreatMiner](https://www.threatminer.org/) | Automation integration: [ThreatMiner](/docs/platform-services/automation-service/app-central/integrations/threatminer/) |
Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
---
2+
title: ThreatConnect V3
3+
description: ''
4+
---
5+
import useBaseUrl from '@docusaurus/useBaseUrl';
6+
7+
<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="threatminer" width="100"/>
8+
9+
***Version: 1.0
10+
Updated: October 17, 2025***
11+
12+
Utilize ThreatConnect intelligence data during incident investigations using V3 APIs.
13+
14+
## Actions
15+
16+
* **Search Intelligence** (*Enrichment*) - Search ThreatConnect data for information matching the specified query.
17+
* **Update Intelligence** (*Notification*) - Update ThreatConnect intelligence data.
18+
19+
## Configure ThreatConnect in Automation Service and Cloud SOAR
20+
21+
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
22+
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
23+
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
24+
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
25+
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
26+
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
27+
28+
<IntegrationsAuth/>
29+
* <IntegrationLabel/>
30+
* **Server URL**. Enter your ThreatConnect [server URL](https://docs.threatconnect.com/en/latest/rest_api/quick_start.html), for example, `https://api.threatconnect.com`.
31+
32+
* **Access ID**. Enter a ThreatConnect [access ID](https://knowledge.threatconnect.com/docs/managing-user-accounts#creating-an-api-user).
33+
34+
* **Secret Key**. Enter the secret for the access ID.
35+
36+
* **Default owner**. Enter the default [owner](https://knowledge.threatconnect.com/docs/en/ownership-in-threatconnect).
37+
* <IntegrationTimeout/>
38+
* <IntegrationCertificate/>
39+
* <IntegrationEngine/>
40+
* <IntegrationProxy/>
41+
42+
<img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/misc/threatconnect-configuration.png')} style={{border:'1px solid gray'}} alt="ThreatConnect configuration" width="400"/>
43+
44+
For information about ThreatConnect, see [ThreatConnect documentation](https://docs.threatconnect.com/en/latest/).
45+
46+
## Change Log
47+
48+
* October 17, 2025 - First upload

0 commit comments

Comments
 (0)