ctrl+shift+p filters: :st2 :st3 :win :osx :linux
Browse

Threat​Connect Share Comments

by fhightower ST2/ST3

Sublime Text snippets for writing share comments in ThreatConnect.

Labels snippets

Details

Installs

  • Total 194
  • Win 147
  • OS X 33
  • Linux 14
Dec 19 Dec 18 Dec 17 Dec 16 Dec 15 Dec 14 Dec 13 Dec 12 Dec 11 Dec 10 Dec 9 Dec 8 Dec 7 Dec 6 Dec 5 Dec 4 Dec 3 Dec 2 Dec 1 Nov 30 Nov 29 Nov 28 Nov 27 Nov 26 Nov 25 Nov 24 Nov 23 Nov 22 Nov 21 Nov 20 Nov 19 Nov 18 Nov 17 Nov 16 Nov 15 Nov 14 Nov 13 Nov 12 Nov 11 Nov 10 Nov 9 Nov 8 Nov 7 Nov 6 Nov 5
Windows 0 0 0 0 0 0 0 0 2 0 0 1 0 0 0 0 1 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 1 0 1 0 1 0 0 0 0 0 0 1 0
OS X 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0
Linux 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

Readme

Source
raw.​githubusercontent.​com

ThreatConnect Share Comment Snippets

These are Sublime Text snippets for writing share comments in ThreatConnect.

Installation

  1. Package Control (Preferred)
    1. This package is available on Package Control under the name “ThreatConnect Share Comments”.

  2. Manual Installation:

    1. cd into your Sublime Text packages directory (see https://stackoverflow.com/questions/7808452/what-is-the-full-path-to-the-packages-folder-for-sublime-text-2-on-mac-os-lion for more details).
    2. Clone this repository:

    git clone https://github.com/fhightower/threatconnect-share-comment-snippets.git.

Available Links

  • Groups:
    • Adversaries (tc-adversary)
    • Campaigns (tc-campaign)
    • Documents (tc-document)
    • Emails (tc-email)
    • Incidents (tc-incident)
    • Signatures (tc-signature)
    • Threats (tc-threat)
  • Indicators:
    • Addresses (tc-address)
    • Email Addresses (tc-emailaddress)
    • Files (tc-file)
    • Hosts (tc-host)
    • URLs (tc-url)
  • Tags (tc-tag)
  • Tasks (tc-task)
  • Tracks (tc-track)
  • Victim (tc-victim)
  • Tracks (tc-track)
  • @this (tc-this) - this gets converted to the name of the owner into which the comment is posted

Usage

Each snippet is prefixed with “tc-”, so just start typing “tc-” followed by the indicator, group, or object type to which you would like to link. By default, each of these snippets will position the cursor such that you can type or paste the name/ID of the item to which you are linking. Hitting will take you to the end of the snippet so you can continue typing.