Create a feed linked to a STIX TAXII server

Updated
  • Updated on Apr 14, 2025
  • Published on Nov 18, 2024
  • 1 minute(s) read

Create a feed linked to a STIX TAXII server to automate and prioritize threats in a standardized and shareable format, which helps you manage threat intelligence effectively.

For automatically ranked threats, integrate a STIX TAXII server with a feed and gain actionable intelligence to discover patterns and act proactively.

To create a feed linked to a STIX TAXII server, complete the following process:

Create a feed linked to a STIX TAXII server
  1. From the platform homepage, select Threat Intelligence Management, and then select All Feeds.
  2. Select Create New Feed, and then select From TAXII 2.1.
  3. Complete the Create a TAXII 2.1 Feed form.
    1. In the Feed name box, enter a name for your feed.
    2. In the Feed type box, select the type of feed.
    3. In the Vendor box, enter the name of the vendor.
    4. (Optional) In the Description box, enter a description of the feed.
    5. In the Server URL box, enter the name of the TAXII server URL.
    6. In the Authorization box, select your authorization type from the drop-down menu.
  4. Select Load API Roots, and then select the TAXII server from the drop-down menu.
  5. In the Collection box, select a feed to link to.
  6. Select Create.