|
| 1 | +--- |
| 2 | +title: ThreatConnect V3 |
| 3 | +description: '' |
| 4 | +--- |
| 5 | +import useBaseUrl from '@docusaurus/useBaseUrl'; |
| 6 | + |
| 7 | +<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="threatminer" width="100"/> |
| 8 | + |
| 9 | +***Version: 1.0 |
| 10 | +Updated: October 17, 2025*** |
| 11 | + |
| 12 | +Utilize ThreatConnect intelligence data during incident investigations using V3 APIs. |
| 13 | + |
| 14 | +## Actions |
| 15 | + |
| 16 | +* **Search Intelligence** (*Enrichment*) - Search ThreatConnect data for information matching the specified query. |
| 17 | +* **Update Intelligence** (*Notification*) - Update ThreatConnect intelligence data. |
| 18 | + |
| 19 | +## Configure ThreatConnect in Automation Service and Cloud SOAR |
| 20 | + |
| 21 | +import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; |
| 22 | +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; |
| 23 | +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; |
| 24 | +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; |
| 25 | +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; |
| 26 | +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; |
| 27 | + |
| 28 | +<IntegrationsAuth/> |
| 29 | +* <IntegrationLabel/> |
| 30 | +* **Server URL**. Enter your ThreatConnect [server URL](https://docs.threatconnect.com/en/latest/rest_api/quick_start.html), for example, `https://api.threatconnect.com`. |
| 31 | + |
| 32 | +* **Access ID**. Enter a ThreatConnect [access ID](https://knowledge.threatconnect.com/docs/managing-user-accounts#creating-an-api-user). |
| 33 | + |
| 34 | +* **Secret Key**. Enter the secret for the access ID. |
| 35 | + |
| 36 | +* **Default owner**. Enter the default [owner](https://knowledge.threatconnect.com/docs/en/ownership-in-threatconnect). |
| 37 | +* <IntegrationTimeout/> |
| 38 | +* <IntegrationCertificate/> |
| 39 | +* <IntegrationEngine/> |
| 40 | +* <IntegrationProxy/> |
| 41 | + |
| 42 | +<img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/misc/threatconnect-configuration.png')} style={{border:'1px solid gray'}} alt="ThreatConnect configuration" width="400"/> |
| 43 | + |
| 44 | +For information about ThreatConnect, see [ThreatConnect documentation](https://docs.threatconnect.com/en/latest/). |
| 45 | + |
| 46 | +## Change Log |
| 47 | + |
| 48 | +* October 17, 2025 - First upload |
0 commit comments