TAXII2 Server

This integration provides TAXII2 Services for system indicators (Outbound feed).

Category

Data Enrichment & Threat Intelligence

Pack

TAXIIServer

Configuration parameters

• longRunning — Long Running Instance
• version — TAXII2 Server version (required)
• credentials — Username
• collections — Collection JSON (required)
• fields_filter — Cortex XSOAR Extension fields
• res_size — Response Size (required)
• certificate — Certificate (Required for HTTPS)
• key — Private Key (Required for HTTPS)
• hsts_header — Add HSTS header
• service_address — TAXII2 Service URL Address
• longRunningPort — Listen Port (required)
• nginx_global_directives — NGINX Global Directives
• nginx_server_conf — NGINX Server Conf
• cache_refresh_rate — Refresh Rate
• cache_lock_timeout — Cache Lock Timeout (Deprecated)
• cache_lock_age — Cache Lock Age (Deprecated)
• cache_404_ttl — Cache 404 TTL
• cache_default_ttl — Cache Default TTL
• provide_as_indicator — STIX types for STIX indicator Domain Object
• cache_duration_hours — Search-after cache duration hours (required)

Commands (2)

• taxii-server-info — Returns the TAXII server info, default URL, title, etc.
• taxii-server-list-collections — Returns all the collections.