The ThreatConnect^® Activity Pack for ServiceNow^® Orchestration provides a set of activities that can be leveraged from ServiceNow Orchestration workflows to interact with ThreatConnect’s API and Playbooks. These activities provide a broad set of functionalities that can be used for automating threat intelligence and SOC/IR processes.

The following activities are available:

Create ThreatConnect Incident
Create ThreatConnect Indicator
Get ThreatConnect Incident
Get ThreatConnect Indicator
Filter ThreatConnect Indicators
ThreatConnect API Client
Run ThreatConnect Playbook

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.
ServiceNow^® is a registered trademark of ServiceNow, Inc.