TAXII2 Server

This integration provides TAXII2 Services for system indicators (Outbound feed).

Data Enrichment & Threat Intelligence · TAXII Server

Configuration parameters

  • longRunning — Long Running Instance
  • version — TAXII2 Server version (required)
  • credentials — Username
  • collections — Collection JSON (required)
  • fields_filter — Cortex XSOAR Extension fields
  • res_size — Response Size (required)
  • certificate — Certificate (Required for HTTPS)
  • key — Private Key (Required for HTTPS)
  • hsts_header — Add HSTS header
  • service_address — TAXII2 Service URL Address
  • longRunningPort — Listen Port (required)
  • nginx_global_directives — NGINX Global Directives
  • nginx_server_conf — NGINX Server Conf
  • cache_refresh_rate — Refresh Rate
  • cache_lock_timeout — Cache Lock Timeout
  • cache_lock_age — Cache Lock Age
  • cache_404_ttl — Cache 404 TTL
  • cache_default_ttl — Cache Default TTL
  • provide_as_indicator — STIX types for STIX indicator Domain Object
  • cache_duration_hours — Search-after cache duration hours (required)

Commands (2)

  • taxii-server-info

    Returns the TAXII server info, default URL, title, etc.

  • taxii-server-list-collections

    Returns all the collections.