You can enable a TAXII Server to create an outgoing feed based on the threat intelligence
you want to share externally.
TAXII clients will be able to subscribe to the collection and receive feeds.
Enable TAXII Server
TAXII Server Details
Server Address
{{taxiiServerAddress}}api/taxii/1/
Authentication
Basic Auth with username and password. You could also use https://<username>:<password>@<server_fqhn>/api/taxii/1
Endpoints Available
api/taxii/1/collections : To list all available datasets
api/taxii/1/collections/<datasetId>: Lists details of a dataset
api/taxii/1/collections/<datasetId>/objects: List threat feeds in a dataset
api/taxii/1/collections/<datasetId>/objects/<objectId>: List details of a specific feed object
Available Datasets
All datasets of Threat Intel Feeds module will be listed here.
You can add more Datasets under the Threat Feeds section.
Showing {{datasets.length}} records
Dataset Name
ID
{{dataset.name}}
{{dataset.uuid}}
No datasets found.
Feed To Indicator Linking
Select feed confidence threshold for automatically
updating matching indicator record reputation
Enable Feed To Indicator Linking
The reputation of an indicator
for which there is a matching feed found, will automatically be updated with the feed's
reputation, given the feed confidence is equal or above this provided value.