---
title: "ThreatConnect Activity Pack for ServiceNow Orchestration User Guide"
slug: "threatconnect-activity-pack-for-servicenow-orchestration-user-guide"
description: "This article provides a PDF file of the ThreatConnect Activity Pack for ServiceNow Orchestration User Guide for ThreatConnect."
updated: 2022-08-10T14:11:33Z
published: 2022-08-10T14:11:33Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ThreatConnect Activity Pack for ServiceNow Orchestration User Guide

The ThreatConnect® Activity Pack for ServiceNow® Orchestration provides a set of activities that can be leveraged from ServiceNow Orchestration workflows to interact with ThreatConnect’s API and Playbooks. These activities provide a broad set of functionalities that can be used for automating threat intelligence and SOC/IR processes.

The following activities are available:

- Create ThreatConnect Incident
- Create ThreatConnect Indicator
- Get ThreatConnect Incident
- Get ThreatConnect Indicator
- Filter ThreatConnect Indicators
- ThreatConnect API Client
- Run ThreatConnect Playbook

[PDF document](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/ThreatConnect%20Activity%20Pack%20for%20ServiceNow%20Orchestration%20User%20Guide_Software%20Version%201.0.pdf)

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.* *ServiceNow® is a registered trademark of ServiceNow, Inc.*

## Related

- [ThreatConnect App for ServiceNow Security Operations User Guide](/threatconnect-app-for-servicenow-security-operations-user-guide.md)

## Attachments

- [ThreatConnect Activity Pack for ServiceNow Orchestration User Guide_Software Version 1.0.pdf](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/ThreatConnect Activity Pack for ServiceNow Orchestration User Guide_Software Version 1.0.pdf)