TryHackMe Manager

Technical summary

Connects to TryHackMe Enterprise API via THM-API-KEY for user, seat, room and training management. MySQL cache (TTL 10min) and operation history. Intel Hub enricher (priority 60) processes thm_room artifacts. Emerald-green 8-tab UI with seat and API key modals.

Executed scope

• plugin.php (126 lines): "TryHackMe" tab under "Security & OSINT" with terminal icon, doc, 18 API actions (thm_status, thm_dashboard, thm_users_list, thm_user_add_seat, thm_user_remove_seat, thm_rooms_list, thm_room_exists, thm_room_questions, thm_scoreboard, thm_time_report, thm_authenticate, thm_register, thm_history, thm_settings_save, thm_user_progress, thm_org_leaderboard, thm_room_assign, thm_bulk_assign), Intel Hub enricher (type thm_room/room, priority 60).
• backend.php (648 lines): lazy thm_cache and thm_history table install, 600s TTL cache, HTTP client with THM-API-KEY header, 13 business functions (status, dashboard, users_list, add/remove_seat, rooms_list, room_exists, room_questions, scoreboard, time_report, authenticate, register, user_progress, org_leaderboard, room_assign, bulk_assign), paginated history, Intel Hub enricher.
• tab.php (975 lines): Alpine.js 8-tab UI (Dashboard, Users, Rooms, Leaderboard, Assign Room, Time Report, Scoreboard, Configuration), emerald-green theme, modals for API key and seat, leaderboard podium, individual and bulk assignment, CSV export for time report.
• fastr.json: 3 slash commands — /thm-users, /thm-rooms, /thm-score <code>.
• doc.md (34 lines): author's technical documentation (PT).
• icon.svg: terminal brand icon.