The ThreatConnect® Activity Pack for ServiceNow® Orchestration provides a set of activities that can be leveraged from ServiceNow Orchestration workflows to interact with ThreatConnect’s API and Playbooks. These activities provide a broad set of functionalities that can be used for automating threat intelligence and SOC/IR processes.
The following activities are available:
- Create ThreatConnect Incident
- Create ThreatConnect Indicator
- Get ThreatConnect Incident
- Get ThreatConnect Indicator
- Filter ThreatConnect Indicators
- ThreatConnect API Client
- Run ThreatConnect Playbook
ThreatConnect® is a registered trademark of ThreatConnect, Inc.
ServiceNow® is a registered trademark of ServiceNow, Inc.