ctrl+shift+p filters: :st2 :st3 :win :osx :linux
Browse

Threat​Connect Share Comments

by fhightower ST2/ST3

Sublime Text snippets for writing share comments in ThreatConnect.

Labels snippets

Details

Installs

  • Total 75
  • Win 51
  • OS X 12
  • Linux 12
Oct 18 Oct 17 Oct 16 Oct 15 Oct 14 Oct 13 Oct 12 Oct 11 Oct 10 Oct 9 Oct 8 Oct 7 Oct 6 Oct 5 Oct 4 Oct 3 Oct 2 Oct 1 Sep 30 Sep 29 Sep 28 Sep 27 Sep 26 Sep 25 Sep 24 Sep 23 Sep 22 Sep 21 Sep 20 Sep 19 Sep 18 Sep 17 Sep 16 Sep 15 Sep 14 Sep 13 Sep 12 Sep 11 Sep 10 Sep 9 Sep 8 Sep 7 Sep 6 Sep 5 Sep 4 Sep 3
Windows 0 0 0 0 0 0 0 0 0 1 0 0 3 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 1 0 0 1 0 0 0 0 0 0 1
OS X 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Linux 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0

Readme

Source
raw.​githubusercontent.​com

ThreatConnect Share Comment Snippets

These are Sublime Text snippets for writing share comments in ThreatConnect.

Installation

  1. Package Control (Preferred)
    1. This package is available on Package Control under the name “ThreatConnect Share Comments”.

  2. Manual Installation:

    1. cd into your Sublime Text packages directory (see https://stackoverflow.com/questions/7808452/what-is-the-full-path-to-the-packages-folder-for-sublime-text-2-on-mac-os-lion for more details).
    2. Clone this repository:

    git clone https://github.com/fhightower/threatconnect-share-comment-snippets.git.

Available Links

  • Groups:
    • Adversaries (tc-adversary)
    • Campaigns (tc-campaign)
    • Documents (tc-document)
    • Emails (tc-email)
    • Incidents (tc-incident)
    • Signatures (tc-signature)
    • Threats (tc-threat)
  • Indicators:
    • Addresses (tc-address)
    • Email Addresses (tc-emailaddress)
    • Files (tc-file)
    • Hosts (tc-host)
    • URLs (tc-url)
  • Tags (tc-tag)
  • Tasks (tc-task)
  • Tracks (tc-track)
  • Victim (tc-victim)
  • Tracks (tc-track)
  • @this (tc-this) - this gets converted to the name of the owner into which the comment is posted

Usage

Each snippet is prefixed with “tc-”, so just start typing “tc-” followed by the indicator, group, or object type to which you would like to link. By default, each of these snippets will position the cursor such that you can type or paste the name/ID of the item to which you are linking. Hitting will take you to the end of the snippet so you can continue typing.