Using the Threat Intelligence Connector with a CRON Job

You can run the Threat Intelligence connector with a CRON job by following the example provided in the examples/docker_example folder.

The CRON job is setup in the crontab_process_server file. By default, it runs one time per month, but you can adjust that schedule.

Fill out the credentials in examples/docker_example/credentials.cbc to access the Carbon Black Cloud. The TAXII Server configuration (config.yml) is located at the root of the repository. You can change that location by specifying a different configuration in the crontab_process_server file in the --config-file option.