Documentation Index

Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt

Use this file to discover all available pages before exploring further.

🚀 ThreatConnect® 8.0 is now available!

Skills

Prev Next

10 Skills for Polarity

Analyst workflows for Claude, built on the Polarity integrations you already run. 

Your analysts already have the intel — it's just spread across 90+ integrations, checked one at a time.  

These 10 Skills turn that sprawl into a single conversation:

  1. Point Claude at a(n):

    1. Suspicious email

    2. CVE list

    3. Account

  2. Receive:

    1. Enrichment

    2. Correlation

    3. A Scored Verdict

No new infrastructure — every skill runs on Polarity integrations already deployed.

Each skill:

  1. Parses the entity

  2. Enriches in parallel across Polarity

  3. Correlates

  4. Scores

  5. Renders

Download the Skills Package: 

Skill Breakout

Triage & response

Skill

What it does

.md File

Claude Skill

Phishing email triage

Scores a reported email from sender, header, link, and attachment enrichment; drafts a quarantine note.

Vulnerability prioritization

Ranks CVEs by real exposure — Spotlight, ORCA, internal scans — not just CVSS.

Identity compromise check

Fans one account across Okta, Entra, HIBP, and EDR to answer the question “Is this person compromised?”

IOC bulk submission

Confirms and pushes validated indicators to ThreatConnect/ MISP/OpenCTI/ThreatStream-style platforms in one batch

Investigation & Intel

Skill

What it does

.md File

Claude Skill

Asset/Host investigation

Builds one host timeline from EDR, logs, inventory, and exposure data — no console-hopping.

Infrastructure pivot

Walks outward from a single bad IP or domain via WHOIS and passive DNS to map a campaign.

Threat actor dossier

Consolidates attribution, TTPs, and recent news about a named actor into a single profile.

Dark web exposure check

Periodic scan of a domain, exec, or brand against breach data, BRI sources, and lookalike domains.

Reporting & Operations

Skill

What it does

.md File

Claude Skill

Shift handoff summary

Rolls up a shift's tickets and verdicts into a handoff that the next analyst can act on.

Executive briefing generator

Translates a triaged incident into plain-English framing that a CISO or board can read.