Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/integrations/product-list/product-list-m-z.md
Original file line number Diff line number Diff line change
Expand Up @@ -181,7 +181,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
| <img src={useBaseUrl('img/integrations/misc/tessian-logo.png')} alt="Thumbnail icon" width="50"/> | [Tessian](https://www.tessian.com/) | Partner integration: [Tessian for Sumo Logic](https://github.com/SumoLogic/sumologic-public-partner-apps/tree/master/Tessian#tessian-for-sumo-logic) |
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/thehive.png')} alt="Thumbnail icon" width="75"/> | [TheHive](https://thehive-project.org/) | Automation integration: [TheHive](/docs/platform-services/automation-service/app-central/integrations/thehive/) |
| <img src={useBaseUrl('img/integrations/misc/thinkst-canary-logo.png')} alt="Thumbnail icon" width="100"/> | [Thinkst Canary](https://canary.tools/) | Cloud SIEM integration: [Thinkst Canary](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/0152e233-fce6-4cbf-9edc-721d7bef94f8.md) |
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="Thumbnail icon" width="100"/> | [ThreatConnect](https://threatconnect.com/) | Automation integration: [ThreatConnect](/docs/platform-services/automation-service/app-central/integrations/threatconnect/) |
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="Thumbnail icon" width="100"/> | [ThreatConnect](https://threatconnect.com/) | Automation integrations: <br/>- [ThreatConnect](/docs/platform-services/automation-service/app-central/integrations/threatconnect/) <br/>- [ThreatConnect V3](/docs/platform-services/automation-service/app-central/integrations/threatconnect-v3) |
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threat-crowd.png')} alt="Thumbnail icon" width="100"/> | [Threat Crowd](https://otx.alienvault.com/) | Automation integration: [Threat Crowd](/docs/platform-services/automation-service/app-central/integrations/threat-crowd/) |
| <img src={useBaseUrl('img/integrations/misc/threater-logo.png')} alt="Thumbnail icon" width="75"/> | [Threater](https://www.threater.com/) | Cloud SIEM integration: [Bandura](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/ec354a4c-a761-4e18-8ceb-194d6e8692e2.md) |
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/threatminer.png')} alt="Thumbnail icon" width="125"/> | [ThreatMiner](https://www.threatminer.org/) | Automation integration: [ThreatMiner](/docs/platform-services/automation-service/app-central/integrations/threatminer/) |
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
---
title: ThreatConnect V3
description: ''
---
import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/threatconnect.png')} alt="threatminer" width="100"/>

***Version: 1.0
Updated: October 17, 2025***

Utilize ThreatConnect intelligence data during incident investigations using V3 APIs.

## Actions

* **Search Intelligence** (*Enrichment*) - Search ThreatConnect data for information matching the specified query.
* **Update Intelligence** (*Notification*) - Update ThreatConnect intelligence data.

## Configure ThreatConnect in Automation Service and Cloud SOAR

import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';

<IntegrationsAuth/>
* <IntegrationLabel/>
* **Server URL**. Enter your ThreatConnect [server URL](https://docs.threatconnect.com/en/latest/rest_api/quick_start.html), for example, `https://api.threatconnect.com`.

* **Access ID**. Enter a ThreatConnect [access ID](https://knowledge.threatconnect.com/docs/managing-user-accounts#creating-an-api-user).

* **Secret Key**. Enter the secret for the access ID.

* **Default owner**. Enter the default [owner](https://knowledge.threatconnect.com/docs/en/ownership-in-threatconnect).
* <IntegrationTimeout/>
* <IntegrationCertificate/>
* <IntegrationEngine/>
* <IntegrationProxy/>

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/misc/threatconnect-configuration.png')} style={{border:'1px solid gray'}} alt="ThreatConnect configuration" width="400"/>

For information about ThreatConnect, see [ThreatConnect documentation](https://docs.threatconnect.com/en/latest/).

## Change Log

* October 17, 2025 - First upload