Ingests indicator feeds from TAXII 1.x servers.
TAXII Feed
- Details
- Content
- Dependencies
- Version History
Ingest indicator feeds from TAXII 1 and TAXII 2 servers.
Indicator Fields
Name | Description |
---|---|
STIX TTP Title | |
STIX Indicator Name | |
STIX Indicator Description |
Integrations
Name | Description |
---|---|
TAXII Feed | |
TAXII 2 Feed | Ingests indicator feeds from TAXII 2.0 and 2.1 servers. |
Indicator Fields
Name | Description |
---|---|
STIX TTP Title | |
STIX Indicator Name | |
STIX Indicator Description |
Integrations
Name | Description |
---|---|
TAXII Feed | Ingests indicator feeds from TAXII 1.x servers. |
TAXII 2 Feed | Ingests indicator feeds from TAXII 2.0 and 2.1 servers. |
Required Content Packs (1)
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Optional Content Packs (0)
Pack Name | Pack By |
---|
All level dependencies (0)
Pack Name | Pack By |
---|
1.1.23 - 4830321 (March 16, 2023) Related pull requests:
- 25285
- 25267
- 25134
- 25182
- 25007
- 25271
- 25269
- 25186
- 25088
- 25219
- 25261
- 25260
- 25258
- 25257
- 25256
- 25174
- 25280
Download
Integrations
TAXII 2 Feed
- Updated the Docker image to: demisto/taxii2:1.0.0.50128.
- Fixed an issue where adding collections to fetch and then removing them resulted in an error.
- 25285
- 25267
- 25134
- 25182
- 25007
- 25271
- 25269
- 25186
- 25088
- 25219
- 25261
- 25260
- 25258
- 25257
- 25256
- 25174
- 25280
Download
1.1.22 - 4797511 (March 12, 2023) Related pull requests:
- 25157
Download
Integrations
TAXII 2 Feed
Updated the Docker image to: demisto/taxii2:1.0.0.48742.
Fixed an issue where the fetch-indicators command did not assign a default TLP value to new indicators.
Fixed an issue in the fetch-indicators command, where an error was raised when indicators were without a name field.
Changed default value of Traffic Light Protocol Color parameter to be WHITE
- 25157
Download
1.1.21 - R4718798 (March 1, 2023) Related pull requests:
- 24130
Download
Integrations
TAXII Feed
- This version requires the Base pack to be updated to version 1.31.56 or higher.
- Fixed an issue in the parsing of Certificate File as Text integration parameter.
- Updated the Docker image to: demisto/taxii:1.0.0.45815.
TAXII 2 Feed
- This version requires the Base pack to be updated to version 1.31.56 or higher.
- Fixed an issue in the parsing of Certificate File as Text integration parameter.
- Updated the Docker image to: demisto/taxii2:1.0.0.45745.
- 24130
Download
1.1.19 - R4372591 (January 11, 2023) Related pull requests:
- 23437
Download
Integrations
TAXII 2 Feed
- Added the Key File as Text integration parameter to support credentials fetching object.
TAXII Feed
- Updated the Docker image to: demisto/taxii:1.0.0.43208.
- Added the Key File as Text integration parameter to support credentials fetching object.
- 23437
Download
1.1.16 - 4179430 (December 8, 2022) Related pull requests:
- 22663
Download
Integrations
TAXII 2 Feed
- Added support for fetching Identity, Location and Vulnerability indicators.
- Added support for getting the TLP color to apply to the indicator from the marking definition value of it.
- Updated the Docker image to: demisto/taxii2:1.0.0.39779.
- 22663
Download
1.1.6 - 2624637 (March 22, 2022) Download
Integrations
TAXII 2 Feed
- Fixed an issue where the feed failed to parse indicators without modified time.
1.1.5 - 2507216 (March 3, 2022) Download
Integrations
TAXII Feed
- Updated the Docker image to: demisto/taxii:1.0.0.26935.
1.1.4 - 2400513 (February 11, 2022) Download
Integrations
TAXII 2 Feed
- Fixed an issue where extension-definition objects were fetched as indicators of the wrong type instead of being skipped.
1.1.3 - 2179441 (December 29, 2021) Download
Integrations
TAXII Feed
- Updated the Docker image to: demisto/taxii:1.0.0.25288.
1.1.2 - R2146019 (December 21, 2021) Download
Integrations
TAXII Feed
- Updated the Docker image to: demisto/taxii:1.0.0.25216.
1.1.1 - 1913264 (November 8, 2021) Download
Integrations
TAXII Feed
- Added new fields to the indicator.
- Added support for relationships between indicators.
Indicator Fields
New: STIX Indicator Description
- Description for the STIX indicator.
New: STIX Indicator Name
- Name for the STIX indicator.
New: STIX TTP Title
- Title for the STIX TTP indicator.
1.1.0 - 1895607 (November 4, 2021) Download
Integrations
TAXII 2 Feed
- Added support to fetch non indicator stix objects, e.g, attack pattern, tool.
- Added relationships ingestion between objects.
- Added certificate authentication.
- Updated the Docker image to: demisto/taxii2:1.0.0.23423.
1.0.12 - 7933644 (October 4, 2021) Download
Integrations
TAXII Feed
- Fixed an issue where tags weren't being added to incoming indicators.
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
Certification | Certified | Read more |
Supported By | Cortex | |
Created | July 5, 2020 | |
Last Release | May 3, 2023 |
WORKS WITH THE FOLLOWING INTEGRATIONS:

