Pack Contributors:
- barpec12
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
TAXII Feed
- Details
- Content
- Dependencies
- Version History
Ingest indicator feeds from TAXII 1 and TAXII 2 servers.
Pack Contributors:
- barpec12
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
Indicator Fields
| Name | Description |
|---|---|
STIX Indicator Description | |
STIX Indicator Name | |
STIX TTP Title |
Integrations
| Name | Description |
|---|---|
| TAXII 2 Feed | Ingests indicator feeds from TAXII 2.0 and 2.1 servers. |
| TAXII Feed | Ingests indicator feeds from TAXII 1.x servers. |
Indicator Fields
| Name | Description |
|---|---|
STIX Indicator Description | |
STIX TTP Title | |
STIX Indicator Name |
Integrations
| Name | Description |
|---|---|
| TAXII 2 Feed | Ingests indicator feeds from TAXII 2.0 and 2.1 servers. |
| TAXII Feed | Ingests indicator feeds from TAXII 1.x servers. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
1.2.31 - 2438447 (February 11, 2025)
- 38349
Download
Integrations
TAXII Feed
Fixed an issue where Domain type indicators were not retrieved in the get-indicators and fetch-indicators commands.
TAXII 2 Feed
Fixed an issue where under specific conditions the exported times of the indicators were presented as UTC when they were actually in local time. All the exported times are now correctly parsed into UTC the time zone.
- 38349
Download
1.2.12 - 931860 (April 3, 2024)
- 33106
Download
Integrations
TAXII 2 Feed
- Added support for extracting the is_family field from the Malware indicator.
- Added support for extracting the sample_refs field from the Registry Key indicator.
- Added support for extracting the number_of_subkeys field from the Registry Key indicator.
- Added support for extracting the values field from the Registry Key indicator.
- Updated the Docker image to: demisto/taxii2:1.0.0.90938.
- 33106
Download
1.2.11 - 907391 (March 21, 2024)
- 32986
Download
Integrations
TAXII 2 Feed
- Added support for confidence and languages indicator fields to all IOCs, when applicable.
- Fixed an issue where stixid, firstseenbysource, modified, description, trafficlightprotocol and publications were not added to IOCs of type indicator.
- 32986
Download
1.2.31 - 2438447 (February 11, 2025)
- 38349
Download
Integrations
TAXII Feed
Fixed an issue where Domain type indicators were not retrieved in the get-indicators and fetch-indicators commands.
TAXII 2 Feed
Fixed an issue where under specific conditions the exported times of the indicators were presented as UTC when they were actually in local time. All the exported times are now correctly parsed into UTC the time zone.
- 38349
Download
1.2.12 - 933455 (April 3, 2024)
- 33106
Download
Integrations
TAXII 2 Feed
- Added support for extracting the is_family field from the Malware indicator.
- Added support for extracting the sample_refs field from the Registry Key indicator.
- Added support for extracting the number_of_subkeys field from the Registry Key indicator.
- Added support for extracting the values field from the Registry Key indicator.
- Updated the Docker image to: demisto/taxii2:1.0.0.90938.
- 33106
Download
1.2.11 - 907391 (March 21, 2024)
- 32986
Download
Integrations
TAXII 2 Feed
- Added support for confidence and languages indicator fields to all IOCs, when applicable.
- Fixed an issue where stixid, firstseenbysource, modified, description, trafficlightprotocol and publications were not added to IOCs of type indicator.
- 32986
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 5, 2020 | |
| Last Release | May 15, 2025 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
