MISP-Taxii-Server icon indicating copy to clipboard operation
MISP-Taxii-Server copied to clipboard

Anomaly STAXX integration with MISP

Open karmine05 opened this issue 4 years ago • 2 comments

I am trying to ingest TAXII feed from Anomaly STAXX to MISP using MISP-TAXII Implementation. Is there any documentation related to this. So far no luck on this, any info will be helpful.

Thanks in advance.

karmine05 avatar May 20 '20 14:05 karmine05

Hi @karmine05, if i am not wrong STAXX has a client for TAXII with a discovery URL and guest/guest user password combo. I guess this way, we can ingest STAXX data into MISP

AashiqRamachandran avatar Oct 08 '20 07:10 AashiqRamachandran

Just to Update there is simple way of directly integrating Anomaly STAXX data into MISP .. I ended up writing my own script to export the data out and do some tagging and then import in MISP.

karmine05 avatar Oct 19 '20 21:10 karmine05