TAXII Feed

Details
Content
Dependencies
Version History

Ingest indicator feeds from TAXII 1 and TAXII 2 servers.

Indicator Fields

Name	Description
STIX TTP Title
STIX Indicator Name
STIX Indicator Description

Integrations

Name	Description
TAXII Feed	Ingests indicator feeds from TAXII 1.x servers.
TAXII 2 Feed	Ingests indicator feeds from TAXII 2.0 and 2.1 servers.

Indicator Fields

Name	Description
STIX TTP Title
STIX Indicator Name
STIX Indicator Description

Integrations

Name	Description
TAXII Feed	Ingests indicator feeds from TAXII 1.x servers.
TAXII 2 Feed	Ingests indicator feeds from TAXII 2.0 and 2.1 servers.

Pack Name	Pack By
Base	By: Cortex XSOAR

1.1.24 - R5180312 (May 3, 2023)

Integrations

TAXII 2 Feed

Fixed an issue where Relationships weren't created between indicators.
Updated the Docker image to: demisto/taxii2:1.0.0.52421.

Related pull requests:
- 25554

Download

1.1.23 - 4830321 (March 16, 2023)

Integrations

TAXII 2 Feed

Updated the Docker image to: demisto/taxii2:1.0.0.50128.
Fixed an issue where adding collections to fetch and then removing them resulted in an error.

Related pull requests:
- 25285
- 25267
- 25134
- 25182
- 25007
- 25271
- 25269
- 25186
- 25088
- 25219
- 25261
- 25260
- 25258
- 25257
- 25256
- 25174
- 25280

Download

1.1.22 - 4797511 (March 12, 2023)

Integrations

TAXII 2 Feed

Updated the Docker image to: demisto/taxii2:1.0.0.48742.
Fixed an issue where the fetch-indicators command did not assign a default TLP value to new indicators.
Fixed an issue in the fetch-indicators command, where an error was raised when indicators were without a name field.
Changed default value of Traffic Light Protocol Color parameter to be WHITE

Related pull requests:
- 25157

Download

1.1.21 - R4718798 (March 1, 2023)

Integrations

TAXII Feed

This version requires the Base pack to be updated to version 1.31.56 or higher.
Fixed an issue in the parsing of Certificate File as Text integration parameter.
Updated the Docker image to: demisto/taxii:1.0.0.45815.

TAXII 2 Feed

This version requires the Base pack to be updated to version 1.31.56 or higher.
Fixed an issue in the parsing of Certificate File as Text integration parameter.
Updated the Docker image to: demisto/taxii2:1.0.0.45745.

Related pull requests:
- 24130

Download

1.1.20 - 4384217 (January 12, 2023)

Integrations

TAXII 2 Feed

Fixed an issue where getting indicators failed to parse empty response.

Related pull requests:
- 23776

Download

1.1.19 - R4372591 (January 11, 2023)

Integrations

TAXII 2 Feed

Added the Key File as Text integration parameter to support credentials fetching object.

TAXII Feed

Updated the Docker image to: demisto/taxii:1.0.0.43208.
Added the Key File as Text integration parameter to support credentials fetching object.

Related pull requests:
- 23437

Download

1.1.18 - R4358537 (January 9, 2023)

Integrations

TAXII 2 Feed

Updated the Docker image to: demisto/taxii2:1.0.0.42974.

Related pull requests:
- 23407

Download

1.1.17 - 4227458 (December 16, 2022)

Integrations

TAXII 2 Feed

Added support for limiting the number of fetched indicators.
Improved implementation for polling collections.
Updated the Docker image to: demisto/taxii2:1.0.0.40847.

Related pull requests:
- 19760

Download

1.1.16 - 4179430 (December 8, 2022)

Integrations

TAXII 2 Feed

Added support for fetching Identity, Location and Vulnerability indicators.
Added support for getting the TLP color to apply to the indicator from the marking definition value of it.
Updated the Docker image to: demisto/taxii2:1.0.0.39779.

Related pull requests:
- 22663

Download

1.1.15 - 4105702 (November 26, 2022)

Integrations

TAXII 2 Feed

Updated the Docker image to: demisto/taxii2:1.0.0.38477.

Related pull requests:
- 22492

Download

1.1.14 - 3917401 (October 26, 2022)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 21846

Download

1.1.13 - 3872652 (October 19, 2022)

Integrations

TAXII 2 Feed

Updated the Docker image to: demisto/taxii2:1.0.0.35879.

Related pull requests:
- 21767

Download

1.1.12 - 3679706 (September 18, 2022)

Integrations

TAXII 2 Feed

Updated the Docker image to: demisto/taxii2:1.0.0.34082.

Related pull requests:
- 21277

Download

1.1.11 - 3528006 (August 24, 2022)

Integrations

TAXII 2 Feed

Added support for fetching Cyber-observable Objects indicators.

Related pull requests:
- 20543

Download

1.1.10 - 3506185 (August 21, 2022)

Integrations

TAXII 2 Feed

Added the default_api_root parameter and support to choosing a different API root.

Related pull requests:
- 20153

Download

1.1.9 - 3379905 (August 2, 2022)

Integrations

TAXII 2 Feed

Documentation and metadata improvements.

Related pull requests:
- 20345

Download

1.1.8 - 3204921 (July 5, 2022)

Integrations

TAXII Feed

Updated the Docker image to: demisto/taxii:1.0.0.31644.

Related pull requests:
- 19893

Download

1.1.7 - 3021476 (June 2, 2022)

Integrations

TAXII Feed

Updated the Docker image to: demisto/taxii:1.0.0.30293.

Related pull requests:
- 19352

Download

1.1.6 - 2624637 (March 22, 2022)

Integrations

TAXII 2 Feed

Fixed an issue where the feed failed to parse indicators without modified time.

Download

1.1.5 - 2507216 (March 3, 2022)

Integrations

TAXII Feed

Updated the Docker image to: demisto/taxii:1.0.0.26935.

Download

1.1.4 - 2400513 (February 11, 2022)

Integrations

TAXII 2 Feed

Fixed an issue where extension-definition objects were fetched as indicators of the wrong type instead of being skipped.

Download

1.1.3 - 2179441 (December 29, 2021)

Integrations

TAXII Feed

Updated the Docker image to: demisto/taxii:1.0.0.25288.

Download

1.1.2 - R2146019 (December 21, 2021)

Integrations

TAXII Feed

Updated the Docker image to: demisto/taxii:1.0.0.25216.

Download

1.1.1 - 1913264 (November 8, 2021)

Integrations

TAXII Feed

Added new fields to the indicator.
Added support for relationships between indicators.

Indicator Fields

New: STIX Indicator Description

Description for the STIX indicator.

New: STIX Indicator Name

Name for the STIX indicator.

New: STIX TTP Title

Title for the STIX TTP indicator.

Download

1.1.0 - 1895607 (November 4, 2021)

Integrations

TAXII 2 Feed

Added support to fetch non indicator stix objects, e.g, attack pattern, tool.
Added relationships ingestion between objects.
Added certificate authentication.
Updated the Docker image to: demisto/taxii2:1.0.0.23423.

Download

1.0.12 - 7933644 (October 4, 2021)

Integrations

TAXII Feed

Fixed an issue where tags weren't being added to incoming indicators.

Download

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 5, 2020
Last Release	May 3, 2023

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.