ctrl+shift+p filters: :st2 :st3 :win :osx :linux
Browse

Threat​Connect Share Comments

by fhightower-tc ALL

Sublime Text snippets for writing share comments in ThreatConnect.

Labels snippets

Details

Installs

  • Total 592
  • Win 485
  • Mac 73
  • Linux 34
May 7 May 6 May 5 May 4 May 3 May 2 May 1 Apr 30 Apr 29 Apr 28 Apr 27 Apr 26 Apr 25 Apr 24 Apr 23 Apr 22 Apr 21 Apr 20 Apr 19 Apr 18 Apr 17 Apr 16 Apr 15 Apr 14 Apr 13 Apr 12 Apr 11 Apr 10 Apr 9 Apr 8 Apr 7 Apr 6 Apr 5 Apr 4 Apr 3 Apr 2 Apr 1 Mar 31 Mar 30 Mar 29 Mar 28 Mar 27 Mar 26 Mar 25 Mar 24
Windows 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 0
Mac 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0
Linux 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

Readme

Source
raw.​githubusercontent.​com

ThreatConnect Share Comment Snippets

These are Sublime Text snippets for writing share comments in ThreatConnect.

Installation

  1. Package Control (Preferred)
    1. This package is available on Package Control under the name “ThreatConnect Share Comments”.

  2. Manual Installation:

    1. cd into your Sublime Text packages directory (see https://stackoverflow.com/questions/7808452/what-is-the-full-path-to-the-packages-folder-for-sublime-text-2-on-mac-os-lion for more details).
    2. Clone this repository:

    git clone https://github.com/fhightower/threatconnect-share-comment-snippets.git.

Available Links

  • Groups:
    • Adversaries (tc-adversary)
    • Campaigns (tc-campaign)
    • Documents (tc-document)
    • Emails (tc-email)
    • Incidents (tc-incident)
    • Signatures (tc-signature)
    • Threats (tc-threat)
  • Indicators:
    • Addresses (tc-address)
    • Email Addresses (tc-emailaddress)
    • Files (tc-file)
    • Hosts (tc-host)
    • URLs (tc-url)
  • Tags (tc-tag)
  • Tasks (tc-task)
  • Tracks (tc-track)
  • Victim (tc-victim)
  • Tracks (tc-track)
  • @this (tc-this) - this gets converted to the name of the owner into which the comment is posted

Usage

Each snippet is prefixed with “tc-”, so just start typing “tc-” followed by the indicator, group, or object type to which you would like to link. By default, each of these snippets will position the cursor such that you can type or paste the name/ID of the item to which you are linking. Hitting will take you to the end of the snippet so you can continue typing.