ctrl+shift+p filters: :st2 :st3 :win :osx :linux
Browse

Threat​Connect Share Comments

by fhightower ST2/ST3

Sublime Text snippets for writing share comments in ThreatConnect.

Labels snippets

Details

Installs

  • Total 135
  • Win 99
  • OS X 23
  • Linux 13
Jun 21 Jun 20 Jun 19 Jun 18 Jun 17 Jun 16 Jun 15 Jun 14 Jun 13 Jun 12 Jun 11 Jun 10 Jun 9 Jun 8 Jun 7 Jun 6 Jun 5 Jun 4 Jun 3 Jun 2 Jun 1 May 31 May 30 May 29 May 28 May 27 May 26 May 25 May 24 May 23 May 22 May 21 May 20 May 19 May 18 May 17 May 16 May 15 May 14 May 13 May 12 May 11 May 10 May 9 May 8 May 7
Windows 3 0 0 1 0 0 0 0 0 0 1 1 0 1 2 0 0 0 0 1 1 0 0 0 0 0 0 0 1 0 1 0 0 0 0 1 0 0 0 0 1 0 0 1 0 0
OS X 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 1
Linux 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0

Readme

Source
raw.​githubusercontent.​com

ThreatConnect Share Comment Snippets

These are Sublime Text snippets for writing share comments in ThreatConnect.

Installation

  1. Package Control (Preferred)
    1. This package is available on Package Control under the name “ThreatConnect Share Comments”.

  2. Manual Installation:

    1. cd into your Sublime Text packages directory (see https://stackoverflow.com/questions/7808452/what-is-the-full-path-to-the-packages-folder-for-sublime-text-2-on-mac-os-lion for more details).
    2. Clone this repository:

    git clone https://github.com/fhightower/threatconnect-share-comment-snippets.git.

Available Links

  • Groups:
    • Adversaries (tc-adversary)
    • Campaigns (tc-campaign)
    • Documents (tc-document)
    • Emails (tc-email)
    • Incidents (tc-incident)
    • Signatures (tc-signature)
    • Threats (tc-threat)
  • Indicators:
    • Addresses (tc-address)
    • Email Addresses (tc-emailaddress)
    • Files (tc-file)
    • Hosts (tc-host)
    • URLs (tc-url)
  • Tags (tc-tag)
  • Tasks (tc-task)
  • Tracks (tc-track)
  • Victim (tc-victim)
  • Tracks (tc-track)
  • @this (tc-this) - this gets converted to the name of the owner into which the comment is posted

Usage

Each snippet is prefixed with “tc-”, so just start typing “tc-” followed by the indicator, group, or object type to which you would like to link. By default, each of these snippets will position the cursor such that you can type or paste the name/ID of the item to which you are linking. Hitting will take you to the end of the snippet so you can continue typing.