ThreatConnect Developer Documentation

Star us on GitHub | Request a ThreatConnect Demo

Note

Find something missing or unclear in the documentation? Feel free to raise an issue in the ThreatConnect Developer Documentation repository.

Table of Contents

• Getting Started
• REST API
  • Getting Started
    • Quick Start
  • v3 API
    • Overview
    • Features
    • Case Management Endpoints
    • Threat Intelligence Endpoints
    • Miscellaneous Endpoints
    • TC Exchange Administration Endpoints
  • v2 API
    • API Overview
    • Associations
    • Attributes
    • Batch API
    • Custom Metrics
    • Groups
    • Indicators
    • Notifications
    • Owners
    • Playbooks
    • Security Labels
    • Tags
    • Tasks
    • Victims
  • TAXII Services
    • TAXII 2.1
    • TAXII 1.x
• Python SDK
  • Quick Start
    • Installation
    • Configuration
    • What hath God wrought! (a.k.a. Hello World)
    • Standard Script Heading
    • Next Steps
  • Groups
    • Groups Overview
    • Filtering Groups
    • Generic Group Retrieval
    • Adversaries
    • Campaigns
    • Documents
    • Emails
    • Incidents
    • Signatures
    • Threats
    • Group Associations
    • Group Metadata
  • Indicators
    • Indicators Overview
    • Filtering Indicators
    • Email Addresses
    • Files
    • Hosts
    • IP Addresses
    • URLs
    • Custom Indicators
    • Indicator Associations
    • Indicator Metadata
    • Bulk Indicator Download
    • Batch Commit
  • Owners
    • Retrieve Owners
    • Retrieve Owner Metrics
  • Tasks
    • Filtering Tasks
    • Retrieve Tasks
    • Create Tasks
    • Update Tasks
    • Delete Tasks
    • Task Associations