ThreatConnect Activity Pack for Orchestration
Designed by analysts but built for the whole team
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
| 134 days of no change | ||
| 2026-04-27 | 22 | -22 |
| 19 days of no change | ||
| 2026-04-07 | 23 | -1 |
| 2026-04-06 | 24 | -1 |
| 65 days of no change | ||
| 2026-01-30 | 26 | -2 |
| 2026-01-29 | 27 | -1 |
| 15 days of no change | ||
| 2026-01-13 | 29 | -2 |
| 23 days of no change | ||
| 2025-12-20 | 30 | -1 |
| 74 days of no change | ||
| 2025-10-06 | 29 | +1 |
| 54 days of no change | ||
| 2025-08-12 | 28 | +1 |
About
Designed by analysts but built for the entire team (security operations, threat intelligence, incident response and security leadership), ThreatConnect’s intelligence-driven security operations platform is the only solution available today with intelligence, automation, analytics, and workflows in a single platform. Centralize your intelligence, establish process consistency, scale operations, and measure your effectiveness in one place. To learn more about our threat intelligence platform (TIP) or security orchestration, automation, and response (SOAR) solutions, visit www.ThreatConnect.com.
Key Features
The ThreatConnect Activity Pack for ServiceNow Orchestration provides a set of activities that can be leveraged from ServiceNow Orchestration workflows to interact with ThreatConnect's API and Playbooks. These activities provide a broad set of functionality that can be used for automating Threat Intel and SOC/IR processes.
The following activities are available:
- Create ThreatConnect Incident
- Create ThreatConnect Indicator
- Get ThreatConnect Incident
- Get ThreatConnect Indicator
- Filter ThreatConnect Indicators
- ThreatConnect API Client
- Run ThreatConnect Playbook