Skip to content
Switch branches/tags


Failed to load latest commit information.
Latest commit message
Commit time

Copyright (c) 2018 ThreatConnect, Inc.

ThreatConnect Playbooks

Build Status

This repository gives ThreatConnect customers the ability to create and share Playbooks, Playbook Components, and Playbook Apps for use with their instance of ThreatConnect. Our hope for this repo is that it will:

  • Help promote usage of ThreatConnect via a community of developers,
  • Help customers identify new use cases, and
  • Give new customers the opportunity to learn from existing customers.

This Repository is public. However, contributions will be accepted only from identified ThreatConnect customers. The ThreatConnect Support Team will validate each contribution request before they are published within the Repository, as well as enforce certain formatting requirements.

Please Note: the Support Team will not support Comunity provided apps nor validate code for functionality or security.


For more information on contributing to this repository, see our Contributions Guide.


Documentation for the ThreatConnectⓇ App Framework is available here: The framework provides commonly used Classes and Methods for writing ThreatConnect Apps. The Framework is intended to speed up the development process and ensure Apps contains the core functionality required.

Documentation specific to Playbooks can be found here:

Best practices for creating effective and maintainable Playbooks can be found here:

To create a job or playbook app using tcex, you can use the tcinit command provided in the tcex package (documentation on this function is coming soon).

Other Repositories

We currently provide our customers with four repositories to share your projects with the rest of the ThreatConnect Community.


If you have any questions or requests please contact

If you encounter any bugs please file an issue under the respective app repository.


Access to this Repository is governed by the Apache 2.0 License.

Terms of Service

Access to this Repository is governed by the following Terms of Service.