DHS Feed

Details
Content
Dependencies
Version History

Provides cyber threat indicators from the Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS) by the Department of Homeland Security (DHS).

The Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS) capability enables the exchange of cyber threat indicators, at machine speed, to the Federal Government community.

What does this pack do?

Provides cyber threat indicators from the Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS).

This pack includes the DHS Feed integration.

What does this pack do?

Provides cyber threat indicators from the Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS).

This pack includes the DHS Feed integration.

Integrations

Name	Description
DHS Feed	The Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS) capability enables the exchange of cyber threat indicators, at machine speed, to the Federal Government community.
DHS Feed v2	The Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS) capability enables the exchange of cyber threat indicators, at machine speed, to the Federal Government community.

Integrations

Name	Description
DHS Feed v2	The Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS) capability enables the exchange of cyber threat indicators, at machine speed, to the Federal Government community.
DHS Feed	The Cybersecurity and Infrastructure Security Agency’s (CISA’s) free Automated Indicator Sharing (AIS) capability enables the exchange of cyber threat indicators, at machine speed, to the Federal Government community.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

2.0.62 - 9025379 (May 14, 2026)

Integrations

DHS Feed v2

Documentation and metadata improvements.

Related pull requests:
- 44231

Download

2.0.61 - 8865647 (May 10, 2026)

Integrations

DHS Feed v2

Added support for the tags field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 44209

Download

2.0.60 - 8592679 (April 29, 2026)

Integrations

DHS Feed v2

Added support for the trafficlightprotocol field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 43703

Download

2.0.59 - 8009783 (March 30, 2026)

Integrations

DHS Feed v2

Updated the TAXII2ApiModule to fix an issue where the labels field was missing custom tags in TAXII 2.1 responses.

Related pull requests:
- 43618
- 43388
- 43616
- 42281
- 43619
- 43569
- 43568
- 43547
- 43567
- 43485
- 43408
- 43625
- 43636

Download

2.0.58 - 7827247 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43566

Download

2.0.57 - 6744840 (January 18, 2026)

Integrations

DHS Feed v2

Added support for SOFTWARE type indicators from STIX 2.1 bundles.

Related pull requests:
- 42627

Download

2.0.56 - 6332198 (December 18, 2025)

Integrations

DHS Feed v2

Fixed an issue where the tags field was not extracted for all indicator types.

Related pull requests:
- 42300

Download

2.0.55 - 6187133 (December 8, 2025)

Integrations

DHS Feed v2

Documentation and metadata improvements.

Related pull requests:
- 41813

Download

2.0.54 - 6154473 (December 5, 2025)

Integrations

DHS Feed v2

Added the Cortex XSOAR Extensions fields in STIX Domain Object (SDO) indicators. Cortex XSOAR now includes custom XSOAR indicator fields as extension properties when generating indicators.

Related pull requests:
- 42081

Download

2.0.53 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

2.0.52 - 4473367 (August 10, 2025)

Integrations

DHS Feed v2

Updated the DHS Feed v2 integration to support all types of indicators.

Related pull requests:
- 40835

Download

2.0.51 - 3887930 (June 20, 2025)

Integrations

Updated the Docker image to: demisto/xml-feed:1.0.0.3540467.

Related pull requests:
- 40309

Download

2.0.50 - 3683768 (June 8, 2025)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.3534828.

Related pull requests:
- 40151

Download

2.0.49 - R3481649 (May 21, 2025)

Integrations

DHS Feed v2

Metadata and documentation improvements.

DHS Feed

Metadata and documentation improvements.

Related pull requests:
- 39078

Download

2.0.48 - R2988527 (March 26, 2025)

Integrations

DHS Feed v2

Fixed an issue where under specific conditions the exported times of the indicators were presented as UTC when they were actually in local time. All the exported times are now correctly parsed into UTC the time zone.

Related pull requests:
- 38349

Download

2.0.47 - 1775999 (December 9, 2024)

Integrations

DHS Feed v2

Updated the parsing logic for the autonomous system indicator. When the indicator value is a number, it will be converted to a string.

Related pull requests:
- 37563
- 37449

Download

2.0.46 - 1741355 (December 3, 2024)

Integrations

DHS Feed v2

Fixed an issue where indicators without names were not properly parsed.

Related pull requests:
- 36027

Download

2.0.45 - 1699115 (November 25, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.117320.

Related pull requests:
- 37378
- 37355
- 37356
- 37357

Download

2.0.44 - 1663384 (November 18, 2024)

Integrations

DHS Feed

Updated the Docker image to: demisto/xml-feed:1.0.0.116765.

Related pull requests:
- 37225
- 37222

Download

2.0.43 - 1457639 (October 1, 2024)

Integrations

DHS Feed v2

Enhanced TAXII2FeedApiModule to support setting indicator enrichment exclusion in select feeds. The change has no impact on this integration.

Related pull requests:
- 36445

Download

2.0.42 - 1358619 (September 8, 2024)

Integrations

DHS Feed v2

Fixed an issue where the fetch-indicators command failed to parse nested reports indicators correctly in the Unit42v2 Feed.

Related pull requests:
- 35723

Download

2.0.41 - 1304994 (August 25, 2024)

Integrations

DHS Feed

Refactored code using our validation and pre-commit tools.
Updated the docker image to: demisto/xml-feed:1.0.0.108120

Related pull requests:
- 35873

Download

2.0.40 - 1269433 (August 13, 2024)

Integrations

DHS Feed v2

Removed the When removed from the feed option from the Indicator Expiration Method parameter.
Updated the Docker image to: demisto/taxii2:1.0.0.106354.

DHS Feed

Removed the When removed from the feed option from the Indicator Expiration Method parameter.
Updated the Docker image to: demisto/xml-feed:1.0.0.106350.

Related pull requests:
- 35353

Download

2.0.39 - 1038463 (May 23, 2024)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule related to TAXII2 server integration.

Related pull requests:
- 34484

Download

2.0.38 - 1027410 (May 20, 2024)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule related to TAXII2 server integration.

Related pull requests:
- 34434

Download

2.0.37 - 931860 (April 3, 2024)

Integrations

DHS Feed v2

Added support for extracting the is_family field from the Malware indicator.
Added support for extracting the sample_refs field from the Registry Key indicator.
Added support for extracting the number_of_subkeys field from the Registry Key indicator.
Added support for extracting the values field from the Registry Key indicator.

Related pull requests:
- 33106

Download

2.0.36 - 907391 (March 21, 2024)

Integrations

DHS Feed v2

Added support for confidence and languages indicator fields to all IOCs, when applicable.
Fixed an issue where stixid, firstseenbysource, modified, description, trafficlightprotocol and publications were not added to IOCs of type indicator.

Related pull requests:
- 32986

Download

2.0.35 - 904622 (March 20, 2024)

Integrations

DHS Feed v2

Updated the TAXII2ApiModule script.

Related pull requests:
- 33361
- 33305

Download

2.0.34 - 870683 (March 5, 2024)

Integrations

DHS Feed v2

Fixed an issue where the taxii2-get-indicators command would fail when the TAXII Server would response with a different amount of expected objects.
Updated the Docker image to: demisto/taxii2:1.0.0.88937.

Related pull requests:
- 33061

Download

2.0.33 - 865088 (March 3, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.88937.

Related pull requests:
- 33192

Download

2.0.32 - 834381 (February 18, 2024)

Integrations

DHS Feed

Updated the Docker image to: demisto/xml-feed:1.0.0.87471.

Related pull requests:
- 32642

Download

2.0.31 - 823153 (February 12, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.87504.

Related pull requests:
- 32845

Download

2.0.30 - 798475 (February 1, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.86437.

Related pull requests:
- 32537

Download

2.0.29 - 769959 (January 18, 2024)

Integrations

DHS Feed v2

Added support for returning digested indicators in cases of connectivity issues during the fetch-indicators command.

Related pull requests:
- 32143

Download

2.0.28 - 760302 (January 14, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.84787.

Related pull requests:
- 32158

Download

2.0.27 - 7209615 (December 19, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.83423.

Related pull requests:
- 31558

Download

2.0.26 - 7066068 (December 4, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.82361.

Related pull requests:
- 31294

Download

2.0.25 - 6969581 (November 23, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.80779.

Related pull requests:
- 31075

Download

2.0.24 - 6834680 (November 8, 2023)

Integrations

DHS Feed v2

Updated the default TAXII protocol to 2.1.

Related pull requests:
- 29947

Download

2.0.23 - 6746892 (October 30, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.79368.

Related pull requests:
- 30521

Download

2.0.22 - 6608983 (October 15, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.76503.

Related pull requests:
- 30141

Download

2.0.21 - 6437102 (September 27, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.73692.

Related pull requests:
- 29875

Download

2.0.20 - 6238121 (September 5, 2023)

Integrations

DHS Feed v2

STIX report indicators pulled from the feed will now contain the Report Object References indicator field, which holds the IDs of related indicators.

Related pull requests:
- 29327

Download

2.0.19 - 6139598 (August 24, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.69228.

Related pull requests:
- 29189

Download

2.0.18 - 5998185 (August 9, 2023)

Integrations

DHS Feed v2

Updated the TAXII2ApiModule to fetch all available object types by default when the STIX Objects To Fetch parameter is not provided.

Related pull requests:
- 28710

Download

2.0.17 - 5946331 (August 3, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.66895.

Related pull requests:
- 28732

Download

2.0.16 - 5810923 (July 19, 2023)

Integrations

DHS Feed v2

Fixed an issue passing kwargs taxii2client in the TAXII2ApiModule script.

Related pull requests:
- 28267
- 28258

Download

2.0.15 - 5808303 (July 19, 2023)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule script used by this Feed.

Related pull requests:
- 28204

Download

2.0.14 - R5801668 (July 18, 2023)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule script.

Related pull requests:
- 27927

Download

2.0.13 - 5692327 (July 5, 2023)

Integrations

DHS Feed v2

Fixed an issue where report objects were not parsed correctly.

Related pull requests:
- 27860

Download

2.0.12 - 5636258 (June 28, 2023)

Integrations

DHS Feed

You can now use credentials when configuring the Key File as Text field.
Updated the Docker image to: demisto/xml-feed:1.0.0.63829.

Related pull requests:
- 27697

Download

2.0.11 - 5588925 (June 22, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.63768.

Related pull requests:
- 27633

Download

2.0.10 - 5450895 (June 5, 2023)

Integrations

DHS Feed v2

Fixed an issue with an invalid function call in the TAXII2ApiModule script.

Related pull requests:
- 27205

Download

2.0.9 - 5410099 (May 31, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.61540.

Related pull requests:
- 27076

Download

2.0.8 - 5277943 (May 16, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.58864.

Related pull requests:
- 26537

Download

2.0.7 - R5170573 (May 2, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.56512.

Related pull requests:
- 26186

Download

2.0.6 - 5057113 (April 17, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.54645.

Related pull requests:
- 25888

Download

2.0.5 - 4932445 (March 30, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.52421.

Related pull requests:
- 25607

Download

2.0.4 - 4818573 (March 15, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.50128.

Related pull requests:
- 25294

Download

2.0.3 - R4718798 (March 1, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.48742.

Related pull requests:
- 24730

Download

2.0.2 - R4646022 (February 19, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.47201.

Related pull requests:
- 24317

Download

2.0.1 - 4384217 (January 12, 2023)

Integrations

DHS Feed v2

Improved implementation for dealing with empty response.
Updated the Docker image to: demisto/taxii2:1.0.0.42974.

Related pull requests:
- 23776

Download

2.0.0 - 4227458 (December 16, 2022)

Integrations

New: DHS Feed v2

Added support for TAXII 2 for the DHS feed. (Available from Cortex XSOAR 6.5.0).
Added the dhs-get-collections command.

Related pull requests:
- 19760

Download

1.0.2 - R3984540 (November 7, 2022)

Integrations

DHS Feed

Added type validations and other internal code improvements.

Related pull requests:
- 18028

Download

2.0.62 - 9025379 (May 14, 2026)

Integrations

DHS Feed v2

Documentation and metadata improvements.

Related pull requests:
- 44231

Download

2.0.61 - 8865647 (May 10, 2026)

Integrations

DHS Feed v2

Added support for the tags field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 44209

Download

2.0.60 - 8592679 (April 29, 2026)

Integrations

DHS Feed v2

Added support for the trafficlightprotocol field in the indicator's rawJSON according to the change in TAXII2ApiModule.

Related pull requests:
- 43703

Download

2.0.59 - 8009783 (March 30, 2026)

Integrations

DHS Feed v2

Updated the TAXII2ApiModule to fix an issue where the labels field was missing custom tags in TAXII 2.1 responses.

Related pull requests:
- 43618
- 43388
- 43616
- 42281
- 43619
- 43569
- 43568
- 43547
- 43567
- 43485
- 43408
- 43625
- 43636

Download

2.0.58 - 7827247 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43566

Download

2.0.57 - 6744840 (January 18, 2026)

Integrations

DHS Feed v2

Added support for SOFTWARE type indicators from STIX 2.1 bundles.

Related pull requests:
- 42627

Download

2.0.56 - 6332198 (December 18, 2025)

Integrations

DHS Feed v2

Fixed an issue where the tags field was not extracted for all indicator types.

Related pull requests:
- 42300

Download

2.0.55 - 6187133 (December 8, 2025)

Integrations

DHS Feed v2

Documentation and metadata improvements.

Related pull requests:
- 41813

Download

2.0.54 - 6154473 (December 5, 2025)

Integrations

DHS Feed v2

Added the Cortex XSOAR Extensions fields in STIX Domain Object (SDO) indicators. Cortex XSOAR now includes custom XSOAR indicator fields as extension properties when generating indicators.

Related pull requests:
- 42081

Download

2.0.53 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

2.0.52 - 4473367 (August 10, 2025)

Integrations

DHS Feed v2

Updated the DHS Feed v2 integration to support all types of indicators.

Related pull requests:
- 40835

Download

2.0.51 - 3887930 (June 20, 2025)

Integrations

DHS Feed

Updated the Docker image to: demisto/xml-feed:1.0.0.3540467.

Related pull requests:
- 40309

Download

2.0.50 - 3683768 (June 8, 2025)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.3534828.

Related pull requests:
- 40151

Download

2.0.49 - R3481649 (May 21, 2025)

Integrations

DHS Feed v2

Metadata and documentation improvements.

DHS Feed

Metadata and documentation improvements.

Related pull requests:
- 39078

Download

2.0.48 - R2988527 (March 26, 2025)

Integrations

DHS Feed v2

Related pull requests:
- 38349

Download

2.0.47 - 1775999 (December 9, 2024)

Integrations

DHS Feed v2

Updated the parsing logic for the autonomous system indicator. When the indicator value is a number, it will be converted to a string.

Related pull requests:
- 37563
- 37449

Download

2.0.46 - 1741355 (December 3, 2024)

Integrations

DHS Feed v2

Fixed an issue where indicators without names were not properly parsed.

Related pull requests:
- 36027

Download

2.0.45 - 1699115 (November 25, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.117320.

Related pull requests:
- 37378
- 37355
- 37356
- 37357

Download

2.0.44 - 1663384 (November 18, 2024)

Integrations

DHS Feed

Updated the Docker image to: demisto/xml-feed:1.0.0.116765.

Related pull requests:
- 37225
- 37222

Download

2.0.43 - 1457639 (October 1, 2024)

Integrations

DHS Feed v2

Enhanced TAXII2FeedApiModule to support setting indicator enrichment exclusion in select feeds. The change has no impact on this integration.

Related pull requests:
- 36445

Download

2.0.42 - 1358619 (September 8, 2024)

Integrations

DHS Feed v2

Fixed an issue where the fetch-indicators command failed to parse nested reports indicators correctly in the Unit42v2 Feed.

Related pull requests:
- 35723

Download

2.0.41 - 1304994 (August 25, 2024)

Integrations

DHS Feed

Refactored code using our validation and pre-commit tools.
Updated the docker image to: demisto/xml-feed:1.0.0.108120

Related pull requests:
- 35873

Download

2.0.40 - 1269433 (August 13, 2024)

Integrations

DHS Feed v2

Removed the When removed from the feed option from the Indicator Expiration Method parameter.
Updated the Docker image to: demisto/taxii2:1.0.0.106354.

DHS Feed

Removed the When removed from the feed option from the Indicator Expiration Method parameter.
Updated the Docker image to: demisto/xml-feed:1.0.0.106350.

Related pull requests:
- 35353

Download

2.0.39 - 1038463 (May 23, 2024)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule related to TAXII2 server integration.

Related pull requests:
- 34484

Download

2.0.38 - 1027410 (May 20, 2024)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule related to TAXII2 server integration.

Related pull requests:
- 34434

Download

2.0.37 - 933455 (April 3, 2024)

Integrations

DHS Feed v2

Added support for extracting the is_family field from the Malware indicator.
Added support for extracting the sample_refs field from the Registry Key indicator.
Added support for extracting the number_of_subkeys field from the Registry Key indicator.
Added support for extracting the values field from the Registry Key indicator.

Related pull requests:
- 33106

Download

2.0.36 - 907391 (March 21, 2024)

Integrations

DHS Feed v2

Added support for confidence and languages indicator fields to all IOCs, when applicable.
Fixed an issue where stixid, firstseenbysource, modified, description, trafficlightprotocol and publications were not added to IOCs of type indicator.

Related pull requests:
- 32986

Download

2.0.35 - 904622 (March 20, 2024)

Integrations

DHS Feed v2

Updated the TAXII2ApiModule script.

Related pull requests:
- 33361
- 33305

Download

2.0.34 - 870683 (March 5, 2024)

Integrations

DHS Feed v2

Fixed an issue where the taxii2-get-indicators command would fail when the TAXII Server would response with a different amount of expected objects.
Updated the Docker image to: demisto/taxii2:1.0.0.88937.

Related pull requests:
- 33061

Download

2.0.33 - 865088 (March 3, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.88937.

Related pull requests:
- 33192

Download

2.0.32 - 834381 (February 18, 2024)

Integrations

DHS Feed

Updated the Docker image to: demisto/xml-feed:1.0.0.87471.

Related pull requests:
- 32642

Download

2.0.31 - 821588 (February 12, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.87504.

Related pull requests:
- 32845

Download

2.0.30 - 795978 (January 31, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.86437.

Related pull requests:
- 32537

Download

2.0.29 - 769959 (January 18, 2024)

Integrations

DHS Feed v2

Added support for returning digested indicators in cases of connectivity issues during the fetch-indicators command.

Related pull requests:
- 32143

Download

2.0.28 - 760302 (January 14, 2024)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.84787.

Related pull requests:
- 32158

Download

2.0.27 - 7209615 (December 19, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.83423.

Related pull requests:
- 31558

Download

2.0.26 - 7066068 (December 4, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.82361.

Related pull requests:
- 31294

Download

2.0.25 - 6969581 (November 23, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.80779.

Related pull requests:
- 31075

Download

2.0.24 - 6834680 (November 8, 2023)

Integrations

DHS Feed v2

Updated the default TAXII protocol to 2.1.

Related pull requests:
- 29947

Download

2.0.23 - 6746892 (October 30, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.79368.

Related pull requests:
- 30521

Download

2.0.22 - 6608983 (October 15, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.76503.

Related pull requests:
- 30141

Download

2.0.21 - 6437102 (September 27, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.73692.

Related pull requests:
- 29875

Download

2.0.20 - 6238121 (September 5, 2023)

Integrations

DHS Feed v2

STIX report indicators pulled from the feed will now contain the Report Object References indicator field, which holds the IDs of related indicators.

Related pull requests:
- 29327

Download

2.0.19 - 6139598 (August 24, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.69228.

Related pull requests:
- 29189

Download

2.0.18 - 5998185 (August 9, 2023)

Integrations

DHS Feed v2

Updated the TAXII2ApiModule to fetch all available object types by default when the STIX Objects To Fetch parameter is not provided.

Related pull requests:
- 28710

Download

2.0.17 - 5946331 (August 3, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.66895.

Related pull requests:
- 28732

Download

2.0.16 - 5810923 (July 19, 2023)

Integrations

DHS Feed v2

Fixed an issue passing kwargs taxii2client in the TAXII2ApiModule script.

Related pull requests:
- 28267
- 28258

Download

2.0.15 - 5808303 (July 19, 2023)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule script used by this Feed.

Related pull requests:
- 28204

Download

2.0.14 - 5702009 (July 6, 2023)

Integrations

DHS Feed v2

Fixed an issue in the TAXII2ApiModule script.

Related pull requests:
- 27927

Download

2.0.13 - 5692327 (July 5, 2023)

Integrations

DHS Feed v2

Fixed an issue where report objects were not parsed correctly.

Related pull requests:
- 27860

Download

2.0.12 - 5636258 (June 28, 2023)

Integrations

DHS Feed

You can now use credentials when configuring the Key File as Text field.
Updated the Docker image to: demisto/xml-feed:1.0.0.63829.

Related pull requests:
- 27697

Download

2.0.11 - 5588925 (June 22, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.63768.

Related pull requests:
- 27633

Download

2.0.10 - 5450895 (June 5, 2023)

Integrations

DHS Feed v2

Fixed an issue with an invalid function call in the TAXII2ApiModule script.

Related pull requests:
- 27205

Download

2.0.9 - 5410099 (May 31, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.61540.

Related pull requests:
- 27076

Download

2.0.8 - 5277943 (May 16, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.58864.

Related pull requests:
- 26537

Download

2.0.7 - R5170573 (May 2, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.56512.

Related pull requests:
- 26186

Download

2.0.6 - 5057113 (April 17, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.54645.

Related pull requests:
- 25888

Download

2.0.5 - 4932445 (March 30, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.52421.

Related pull requests:
- 25607

Download

2.0.4 - 4818573 (March 15, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.50128.

Related pull requests:
- 25294

Download

2.0.3 - R4718798 (March 1, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.48742.

Related pull requests:
- 24730

Download

2.0.2 - R4646022 (February 19, 2023)

Integrations

DHS Feed v2

Updated the Docker image to: demisto/taxii2:1.0.0.47201.

Related pull requests:
- 24317

Download

2.0.1 - 4384217 (January 12, 2023)

Integrations

DHS Feed v2

Improved implementation for dealing with empty response.
Updated the Docker image to: demisto/taxii2:1.0.0.42974.

Related pull requests:
- 23776

Download

2.0.0 - 4227458 (December 16, 2022)

Integrations

New: DHS Feed v2

Added support for TAXII 2 for the DHS feed. (Available from Cortex XSOAR 6.5.0).
Added the dhs-get-collections command.

Related pull requests:
- 19760

Download

1.0.2 - R3987057 (November 7, 2022)

Integrations

DHS Feed

Added type validations and other internal code improvements.

Related pull requests:
- 18028

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	February 10, 2021
Last Release	May 14, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.