Create a feed linked to a STIX TAXII server

  • Published on Jan 16, 2025
  • 1 minute(s) read
Prev Next

Create a feed linked to a STIX TAXII server to integrate structured threat intelligence data in real-time and streamline the intake of IOCs.

By connecting with STIX/TAXII feeds, gain broader threat visibility and faster, automated updates to support proactive defense, improving threat detection, incident response, and overall security efficiency.

Create a feed linked to a STIX TAXII feed
  1. From the platform homepage, Select Threat Intelligence Management, and then select Feeds.
  2. Select Create New Feed, and then select From TAXII 2.1.
  3. Complete the Create a TAXII 2.1 Feed form.
    1. In the Feed name box, enter a name for your feed.
    2. In the Feed type box, select the type of feed.
    3. In the Vendor box, enter the name of the vendor.
    4. (Optional) In the Description box, enter a description of the feed.
    5. In the Server URL box, enter the name of the TAXII server URL.
    6. In the Authorization box, select your authorization type from the drop-down menu.
  4. Select Load API Roots, and then select the TAXII server from the drop-down menu.
  5. In the Collection box, select a feed to link to.
  6. Select Create.