ThreatConnect Activity Pack for ServiceNow Orchestration User Guide

The ThreatConnect^® Activity Pack for ServiceNow^® Orchestration provides a set of activities that can be leveraged from ServiceNow Orchestration workflows to interact with ThreatConnect’s API and Playbooks. These activities provide a broad set of functionalities that can be used for automating threat intelligence and SOC/IR processes.

The following activities are available:

• Create ThreatConnect Incident
• Create ThreatConnect Indicator
• Get ThreatConnect Incident
• Get ThreatConnect Indicator
• Filter ThreatConnect Indicators
• ThreatConnect API Client
• Run ThreatConnect Playbook

  

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.
ServiceNow^® is a registered trademark of ServiceNow, Inc.