Contents x
ThreatConnect Basics
8 Articles  in this category
  • Print
  • Dark
    Light
Contents

ThreatConnect Basics

Contains articles that describe the theoretical foundation of, and best practices in, ThreatConnect.
8 Articles in this category
  • Dark
    Light

The ThreatConnect Data Model

This article defines ThreatConnect’s basic data objects: Indicators, Groups, Victims, IRs, Cases, Artifacts, and Tags. It describes the types for each object, how to view each object, and how associations model relationships between objects.
Updated on : 14 May 2025

ThreatConnect Glossary

This article provides definitions of important and commonly used terms in ThreatConnect.
Updated on : 27 Mar 2024

ThreatConnect Owner Roles and Permissions

An owner role is a user’s role in an Organization, Community, or Source in ThreatConnect. This article defines each out-of-the-box ThreatConnect owner role, lists & defines these roles' permissions, & describes how to create a custom owner role.
6 Articles in this category

ThreatConnect Super User Guide

Contains articles describing the functionalities and permissions specific to a Super User account.
2 Articles in this category

ThreatConnect System Roles and Permissions

Your System role determines your System-level permissions on your ThreatConnect instance. This article defines all ThreatConnect System roles, including the access and permissions each role has on each tab of the Settings menu screens.
Updated on : 20 Sep 2024

Ownership in ThreatConnect

Each threat intelligence data object in ThreatConnect has an owner. This article discusses the different types of owners (Organization, Community, and Source) and describes how Indicators that have multiple owners are maintained as separate copies.
Updated on : 11 Apr 2025

ThreatConnect Versioning

This article describes the version numbering scheme used for each ThreatConnect release and provides instructions for how to determine the version and build of ThreatConnect running on your instance and the associated commit.
Updated on : 03 Apr 2024

The Diamond Model

This article explains the Diamond Model of Intrusion Analysis, on which the ThreatConnect object model is based, and the concepts of associations and pivots, which are ways to express the navigations of the Diamond Model.
Updated on : 11 Apr 2024

My Intel Sources

This article describes how to use the My Intel Sources selector in ThreatConnect.
Updated on : 24 Apr 2024

Viewing Owner ID Numbers

This article describes the various screens where you can view an owner’s ID number in ThreatConnect.
Updated on : 21 Mar 2024
Company
Sales and Support
Follow Us
© 2012–2025 ThreatConnect, Inc. All Rights Reserved.