threatconnect-playbooks
Community driven repository of Playbooks and Apps for ThreatConnect.
파일 탐색기
최종 버전 다운로드 (.zip)- (BETA) Active Intel Requirement Brief - Daily.pbxz
- README.md
- __main__.py
- app.py
- app_lib.py
- args.py
- install.json
- job_app.py
- pyproject.toml
- README.md
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- .coveragerc
- .gitignore
- .pre-commit-config.yaml
- app_config.png
- app_install.png
- browse.png
- group.png
- ioc.png
- job_schedule.png
- jobprogram.png
- source_config.png
- CA_-_Abuse_ch__MalwareBazaar_v1.tcx
- readme.md
- Farsight DNSDB Co-Located Host Playbook Template.pbx
- Farsight DNSDB Enrichment User Guide_v1.0.pdf
- Farsight DNSDB Historical Address Playbook Template.pbx
- Farsight DNSDB Historical Host Playbook Template.pbx
- Farsight_DNSDB_Attributes.json
- Farsight_DNSDB_Enrichment_v1.0.tcx
- .coveragerc
- .gitignore
- .pre-commit-config.yaml
- .template_manifest.json
- __main__.py
- app.py
- app_inputs.py
- app_lib.py
- install.json
- playbook_app.py
- pyproject.toml
- README.md
- requirements.lock
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- HYAS Enrichment User Guide_v1.1.pdf
- HYAS Insight Enrichment Playbook Example.pbx
- HYAS Insight Enrichment v1.tcx
- HYAS Insight Email Address Enrichment.pbxz
- HYAS Insight Enrichment.tcx
- HYAS Insight Host Enrichment.pbxz
- HYAS Insight IP Address Enrichment.pbxz
- HYAS Insight SHA256 Enrichment.pbxz
- HYAS Insight Enrichment User Guide v2.0.0.pdf
- IntelFinder Alert Processing v1.pdf
- IntelFinder Alert Processing v1.tcx
- README.md
- IPQualityScore Enrichment User Guide_v1.0.pdf
- IPQualityScore Enrichment.tcx
- README.MD
- Cognyte Luminar - ThreatConnect User Guide v1.0.0.docx
- TC_Luminar_Threat_Intelligence_v1.tcx
- PolySwarm Marketplace v1.1.2.tcx
- PolySwarm Marketplace v1.2.0.tcx
- PolySwarm Marketplace v1.2.4.tcx
- README.md
- README.md
- Silobreaker - Add Adversary Context.pbxz
- Silobreaker - Tag Indicators.pbxz
- Silobreaker Platform.tcx
- ThreatConnect Silobreaker Platform Documentation.pdf
- SlashNext Phishing Incident Response-User Guide.pdf
- SlashNext Phishing Incident Response.tcx
- Spur Context API Enrichment_v1.tcx
- Spur Context API User Documentation.pdf
- SpurContextAPI_Documentation.pdf
- SpurContextAPI_v1.tcx
- choose_app.png
- dash_card_config.png
- dashboard.png
- metric_card_1.png
- trigger.png
- Covid_19_Global_Metrics.abx
- readme.md
- DigitalOcean Droplet Actions.abx
- DigitalOcean SSH Keys Actions.abx
- Generate SSH Key pair for DigitalOcean.abx
- DigitalOcean Droplet Actions.tcx
- DigitalOcean Example.pbx
- DigitalOcean SSH Keys Actions.tcx
- Generate SSH Key pair for DigitalOcean.tcx
- README.md
- .coveragerc
- .gitignore
- .pre-commit-config.yaml
- __main__.py
- app.py
- app_lib.py
- args.py
- install.json
- playbook_app.py
- pyproject.toml
- README.md
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- app_config.png
- browse.png
- choose_app.png
- group.png
- ioc.png
- source_config.png
- trigger.png
- Abuse.ch MalwareBazaar.abx
- readme.md
- app_config.png
- choose_app.png
- dashboard.png
- top_tag.png
- trigger.png
- Observations Tagger.abx
- readme.md
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- README.md
- info.png
- input.png
- output.png
- Array Tools Sample Playbook.png
- Array Tools.pbx
- array_operations.json
- array_operations.json
- .gitignore
- __main__.py
- array_operations.py
- install.json
- README.md
- requirements.txt
- setup.cfg
- tcex.json
- tcex_json_schema.json
- info.png
- input.png
- output.png
- Array Tools Sample Playbook.png
- Array Tools.pbx
- array_set_operations.json
- array_set_operations.json
- .gitignore
- __main__.py
- array_set_operations.py
- install.json
- README.md
- requirements.txt
- setup.cfg
- tcex.json
- tcex_json_schema.json
- info.png
- input.png
- output.png
- Array Tools Sample Playbook.png
- Array Tools.pbx
- array_splice.json
- array_splice.json
- .gitignore
- __main__.py
- array_splice.py
- install.json
- README.md
- requirements.txt
- setup.cfg
- tcex.json
- tcex_json_schema.json
- .gitignore
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- tcex_json_schema.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- tcex_json_schema.json
- Better Attributes.tcx
- README.md
- TCPB_-_Bulk_DNS_Lookup_v1.tcx
- test_argcheck.py
- reverse_lookup_tcenityarray.json
- simple_google_query.json
- simple_google_query_no_nameservers.json
- simple_google_query_no_rrtypes.json
- simple_google_query_rate_1.json
- __init__.py
- custom_feature.py
- test_profiles.py
- validate_feature.py
- test_trap_exception.py
- __init__.py
- conftest.py
- custom.py
- structure.py
- validate.py
- validate_custom.py
- .coveragerc
- .gitignore
- .gitlab-ci.yml
- .pre-commit-config.yaml
- __main__.py
- app.py
- app.yaml
- app_lib.py
- argcheck.py
- args.py
- install.json
- json_util.py
- layout.json
- playbook_app.py
- pyproject.toml
- README.md
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- trap_exception.py
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- CSV to JSON test.pbx
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- __init__.py
- __main__.py
- deduplicator.py
- install.json
- README.md
- requirements.txt
- setup.cfg
- setup.py
- tcex_json_schema.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- entropy-test.pbx
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- Expressions.pages
- Expressions.pdf
- TCPB_-_Expressions_v1.tcx
- ipadress.csv
- __init__.py
- edit_dist.py
- ngram.py
- spamsum.py
- test_argcheck.py
- add.json
- tcexvariable_array.json
- tcexvariable_int.json
- tcexvariable_int_array.json
- tcexvariable_json.json
- tcexvariable_string_literal.json
- __init__.py
- custom_feature.py
- test_profiles.py
- validate_feature.py
- loop_two_vars.json
- loop_two_vars_array.json
- __init__.py
- custom_feature.py
- test_profiles.py
- validate_feature.py
- multi.json
- __init__.py
- custom_feature.py
- test_profiles.py
- validate_feature.py
- four_four_three_loop.json
- __init__.py
- custom_feature.py
- test_profiles.py
- validate_feature.py
- test_atoms.py
- test_eval.py
- test_functions.py
- test_product.py
- test_rexx_parse.py
- asn_test.json
- asn_test_bytes.json
- extract_and_fetch.json
- fetch_indicators_148.66.138.116.json
- fetch_indicators_list_of_addresses.json
- fetch_indicators_nested_list.json
- fetch_indicators_single_list_of_addresses.json
- fetch_indicators_two_list.json
- indicator_types.json
- ioc_patterns.json
- __init__.py
- custom_feature.py
- test_profiles.py
- validate_feature.py
- test_trap_exception.py
- __init__.py
- conftest.py
- custom.py
- validate.py
- validate_custom.py
- .coveragerc
- .gitignore
- .gitlab-ci.yml
- .pre-commit-config.yaml
- __main__.py
- app.py
- app.yaml
- app_lib.py
- argcheck.py
- args.py
- attrdict.py
- grammar.lark
- hyphenate.py
- install.json
- json_util.py
- lark_expr.py
- layout.json
- literal.py
- mergearray.py
- METHODS.md
- methods.py
- playbook_app.py
- pyproject.toml
- README.md
- report.py
- reporting.py
- requirements.txt
- rexxparse.py
- run.py
- setup.cfg
- smartdict.py
- structure.py
- SYNTAX.md
- tcex.json
- throttle.py
- trap_exception.py
- xml_util.py
- .gitignore
- Extract Parseable Indicators.abx
- readme.md
- fromCharCode List Test.pbx
- fromCharCode String Test.pbx
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- BLUF1.png
- BLUF2.png
- BLUF3.png
- BLUF4.png
- L120-123.png
- L124-140.png
- L141-162.png
- L163-172.png
- L18-27.png
- L28-40.png
- L3-8.png
- L42-53.png
- L55-70.png
- L71-92.png
- L93-119.png
- other_notes_requirements.txt.png
- other_notes_template1.png
- other_notes_template2.png
- attributes.json
- Generate Intelligence Report.abx
- Generate Intelligence Report.pbx
- Generate Intelligence Report.tcx
- Part 2.docx
- README.md
- UUIDGeneratorApp.java
- UUIDGeneratorAppMain.java
- UUIDGeneratorAppTest.java
- .gitignore
- install.json
- pom.xml
- README.md
- hamming distance test - strings of differing lengths.pbx
- hamming distance test.pbx
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- tcex.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- __init__.py
- __main__.py
- html_text_parser.py
- install.json
- requirements.txt
- setup.cfg
- setup.py
- tcex_json_schema.json
- .bumpversion.cfg
- .editorconfig
- .gitignore
- Makefile
- README.md
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- Get and Parse Emails from IMAP.pbx
- IMAP Client.abx
- IMAP Client.tcx
- README.md
- Screen Shot 2019-04-29 at 10.29.21 PM.png
- __init__.py
- __main__.py
- indicator_fanger.py
- install.json
- README.md
- requirements.txt
- setup.cfg
- setup.py
- tcex_json_schema.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- info.png
- inputs.png
- outputs.png
- json_builder.json
- json_builder.json
- .gitignore
- __main__.py
- install.json
- json_builder.py
- README.md
- requirements.txt
- setup.cfg
- tcex.json
- tcex_json_schema.json
- info.png
- inputs.png
- outputs.png
- pretty.json
- .gitignore
- __main__.py
- install.json
- json_pretty.py
- README.md
- requirements.txt
- setup.cfg
- tcex.json
- tcex_json_schema.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- MySQLClientApp.java
- MySQLClientMain.java
- MySQLClientAppIT.java
- install.json
- pom.xml
- README.md
- .gitignore
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- setup.cfg
- tcex.json
- tcex_json_schema.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- README.md
- Search Exabeam Data Lake.abx
- Search Exabeam Data Lake.tcx
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- __init__.py
- __main__.py
- install.json
- requirements.txt
- setup.cfg
- setup.py
- strip_string.py
- tcex.json
- tcex_json_schema.json
- .bumpversion.cfg
- .editorconfig
- .gitignore
- Makefile
- README.md
- __init__.py
- __main__.py
- install.json
- requirements.txt
- setup.cfg
- setup.py
- tcex.json
- tcex_json_schema.json
- text_blob.py
- .bumpversion.cfg
- .editorconfig
- .gitignore
- Makefile
- README.md
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- run.py
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- __main__.py
- app.py
- args.py
- install.json
- playbook_app.py
- README.md
- requirements.txt
- run.py
- tcex.json
- __init__.py
- __main__.py
- install.json
- requirements.txt
- setup.cfg
- setup.py
- tcex.json
- tcex_json_schema.json
- yara_validator.py
- .bumpversion.cfg
- .editorconfig
- .gitignore
- Makefile
- README.md
- 1 - Upload File to Unknown Cyber - Example.pbxz
- 2 - Check Processing Status - Example.pbxz
- 3 - Get Matches - Example.pbxz
- README.md
- Unknown Cyber Threat Connect User Guide.pdf
- Unknown Cyber.tcx
- .gitignore
- [utility] [math] Addition and Subtraction.pbx
- README.md
- Arithmetic Functions.pbx
- README.md
- README.md
- ATT&CK Tag Framework.pbx
- [utility] Escape String for Datastore - post 5.6.pbx
- [utility] Escape String for Datastore - pre 5.7.pbx
- README.md
- False Positive Triage.pbx
- README.md
- Get Shodan Enrichment.pbx
- README.md
- [utility] Get String Length.pbx
- README.md
- [utility] Get Value at Array Index.pbx
- README.md
- README.md
- Shorten Group Name.pbx
- Parse HTTP Header.pbx
- README.md
- human_in_the_loop.png
- README.md
- Indicator Defanger.pbx
- README.md
- Indicator Parser.pbx
- README.md
- Indicator Status.pbx
- README.md
- Component - IOC All Data Pull.pbx
- README.md
- ISO Date Formatter.pbx
- README.md
- [Koodous] Request APK Data.pbx
- [Koodous] Search for APKs.pbx
- README.md
- [utility] Log string array.pbx
- README.md
- Maltiverse Host Query.pbx
- Maltiverse IP Address Query.pbx
- README.md
- [utility] [math] Perform Math Operation.pbx
- README.md
- README.md
- Search Mail Messages with Microsoft Graph.pbx
- Query OneMillion API.pbx
- README.md
- playbook_multimeter.gif
- README.md
- Punycode Decoder-Encoder.pbx
- README.md
- [utility] Remove Newlines.pbx
- README.md
- README.md
- ReversingLabs TitaniumCloud - Create Yara Hunting Ruleset.pbx
- README.md
- ReversingLabs TitaniumCloud - Delete Yara Hunting Ruleset.pbx
- Get ReversingLabs TitaniumCloud File Reputation.pbx
- README.md
- Get ReversingLabs Historic TitaniumCloud Multi-AV Scan Records.pbx
- README.md
- ReversingLabs TitaniumCloud - Get Yara Hunting Ruleset Text.pbx
- [SANS ISC] ASN Query.pbx
- [SANS ISC] IP Query.pbx
- README.md
- [utility] String Is Not Empty.pbx
- README.md
- README.md
- Submit to urlscan.io.pbx
- [utility] [timeit] Start timer.pbx
- [utility] [timeit] Stop timer.pbx
- README.md
- Timeit Example.pbx
- README.md
- Unshorten-Me.pbx
- README.md
- VirusTotal Malware Download.pbx
- Readme.md
- Vulnerabilities.tdb
- Ingest of SITE SA Feed.pbxz
- Query Hashes via Email Submission.pbx
- README.md
- Covid-19 Metrics.pbx
- README.md
- IOC to CSV.pbx
- README.MD
- [Reporting] Daily Threat Actor Roundup.pbxz
- README.md
- ReportTemplate.html
- Detonate Malware In McAfee ATD.pbx
- README.md
- Document Keyword Check.pbx
- Populate DataStore with Keywords.pbx
- readme.md
- Verify DataStore Data.pbx
- array_serializer_setup.png
- Array Serializer.pbx
- README.md
- HTML Report Generation Example.pbx
- README.md
- Parse STIX XML from File Post.pbx
- README.md
- PDF_reader.pbx
- README.md
- README.md
- Repeat_Until_Success.pbx
- README.md
- RSA Archer _ Import Archer Record.pbx
- README.md
- Sixgill_-_DarkWeb_Domain_Investigation.pbx
- [unstructured importer] Store Attributes in Datastore - post 5.6.pbx
- [unstructured importer] Store Attributes in Datastore - pre 5.7.pbx
- README.md
- README.md
- URL_reader.pbx
- IPQualityScore Email Reputation Playbook Template Final v2.pbxz
- IPQualityScore Enrichment User Guide_v1.0.pdf
- IPQualityScore IP Address Reputation Playbook Template Final v2.pbxz
- IPQualityScore URL Reputation Playbook Template Final v2.pbxz
- IPQualityScore_Attribites.json
- Readme.md
- Email and Indicator Extract.pbx
- README.md
- Indicator Uniqueness Validator (Address, URL, Host, File, EmailAddress).pbx
- README.md
- Known Asset Check.pbx
- README.md
- README.md
- Dead Hand Receiver.pbx
- Dead Hand Timer.pbx
- README.md
- RF Alerts Incident Create.pbx
- RF Alerts Query.pbx
- Production Phishing Playbook.pbx
- README.MD
- README.MD
- RSS Import Part 1.pbx
- RSS Import Part 2.pbx
- RSS Import Part 3 - Populate DataStore with Keywords.pbx
- RSS Import Part 4 - Verify DataStore Data.pbx
- RSS Import Part 5 - Document Keyword Check.pbx
- README.MD
- Symantec Threat Intelligence API - File Insight Playbook - Raw Json.pbx
- Symantec Threat Intelligence API - File Insight Playbook.pbx
- Symantec Threat Intelligence API - File Protection Playbook - Raw Json.pbx
- Symantec Threat Intelligence API - File Protection Playbook.pbx
- Symantec Threat Intelligence API - File Related Playbook - Raw Json.pbx
- Symantec Threat Intelligence API - File Related Playbook.pbx
- Symantec Threat Intelligence API - Network Insight Playbook - Raw Json.pbx
- Symantec Threat Intelligence API - Network Insight Playbook.pbx
- Symantec Threat Intelligence API - Network Protection Playbook - Raw Json.pbx
- Symantec Threat Intelligence API - Network Protection Playbook.pbx
- Symantec Threat Intelligence API - Network Related Playbook - Raw Json.pbx
- Symantec Threat Intelligence API - Network Related Playbook.pbx
- Symantec ThreatIntel Attributes.json
- Symantec+Threat+Intelligence+Enrichment+User+Guide_v2.pdf
- CrowdStrike Snort Rules Ingest.pbx
- README.md
- CrowdStrike Yara Rules Ingest.pbx
- Parse YARA Rules.tcx
- README.md
- Github Activity Monitor.pbx
- README.md
- Google Alert Feed Reader.pbx
- README.md
- Iris_investigate_PB.pbx
- Page Monitor pre 5.6.pbx
- Page Monitor.pbx
- README.md
- README.md
- Recurring Task.pbx
- Add Attribute and_or Tag to Associated Indicators - Adder.pbx
- Add Attribute and_or Tag to Associated Indicators - Trigger.pbx
- adder.png
- README.md
- trigger.png
- BIF Signature Generator.pbx
- group comment link creator.pbx
- indicator comment link creator.pbx
- README.md
- Cymon IP and Host Query.pbx
- README.md
- Deploy Yara Rule to CarbonBlack.pbx
- README.md
- Adjust DNS.pbx
- README.md
- Turn DNS Off Trigger.pbx
- Turn DNS On Trigger.pbx
- False Positive Triage Standalone - post 5.7.pbx
- False Positive Triage HTTP Interface.pbx
- False Positive Triage Standalone - pre 5.7.pbx
- False Positive Triage Trigger Interface.pbx
- README.md
- 1_Query JIRA API for ticket information (1).pbx
- readme.md
- 000webhost-Breach-Incident.pdf
- associated-incidents.png
- have-i-been-pwned.pbx
- incident.png
- pb-action.png
- playbook.png
- README.md
- tags-applied.png
- Palo Alto Wildfire Malware Triage (File).pbx
- README.md
- attributes.json
- PolySwarm File Lookup 1.1.2.pbx
- PolySwarm File Lookup 1.2.0.pbxz
- PolySwarm File Lookup with download v1.1.2.pbx
- PolySwarm File Lookup with download w_ 1.2.0.pbxz
- PolySwarm Malware Intelligence and Enrichment v1.1.2.pdf
- README.md
- Unicode Domain Encoder User Action Trigger.pbx
- Query Exabeam Data Lake.pbx
- README.md
- README.md
- Robtex ASN Query.pbx
- Robtex IP Query.pbx
- README.md
- RSA Archer _ Create Archer Record from Incident.pbx
- README.md
- Similar URL Finder.pbx
- README.md
- SlashNext Abuse-Inbox URL Scan - v2.0.pbx
- readme.md
- VMRay Get Results.pbx
- VMRay Submission.pbx
- Archive.org Wayback Machine Query.pbx
- README.md
- README.md
- WhatCMS_ Detect CMS of Website.pbx
- Bit.ly Long URL Creator.pbx
- readme.md
- README.md
- VirusTotal - Search Terms.pbx
- README.MD
- TCPB-WF-Escalation Email.pbx
- DomainTools_Iris_search_hash_enrichment_playbook_screenshot.png
- Iris_Search_Hash_Enrichment.pbxz
- attributes.json
- readme.md
- Submit URL To VMRay Analyzer.pbxz
- .gitignore
- test_playbooks.py
- .gitignore
- .travis.yml
- CONTRIBUTING.md
- LICENSE
- README.md
- TOS.md
// repository documentation
Was this content helpful?
(0 ratings)