TAXII¶
Trusted Automated Exchange of Intelligence Information (TAXII™) is an application protocol for exchanging CTI over HTTPS. TAXII defines a RESTful API (a set of services and message exchanges) and a set of requirements for TAXII Clients and Servers. Typically, the data transmitted through TAXII feeds are STIX object(s).
Configuration¶
You will need to consult your TAXII feed vendor on how to generate a username and password for the TAXII feed. TAXII is a protocol so how to retrieve this information may differ between implementations. Cyderes requires the API root to collect from as called out by the TAXII specification. A TAXII server may have multiple API roots that can be collected from. Cyderes also requires the collection IDs which are expected to be pulled by the integration.
Caveats / Known Limitations¶
Currently, Cyderes only supports v2.1 TAXII feeds and basic authentication.
Gather Information¶
Provide the following information to Cyderes to complete implementation:
- API Root(s)
- Username
- Password
- Collection IDs