Anomaly STAXX integration with MISP

MISP / MISP-Taxii-Server

An OpenTAXII Configuration for MISP

BSD 3-Clause "New" or "Revised" License

80 stars 30 forks source link

Anomaly STAXX integration with MISP #84

Open karmine05 opened 4 years ago

karmine05 commented 4 years ago

I am trying to ingest TAXII feed from Anomaly STAXX to MISP using MISP-TAXII Implementation. Is there any documentation related to this. So far no luck on this, any info will be helpful.

Thanks in advance.

AashiqRamachandran commented 4 years ago

Hi @karmine05, if i am not wrong STAXX has a client for TAXII with a discovery URL and guest/guest user password combo. I guess this way, we can ingest STAXX data into MISP

karmine05 commented 4 years ago

Just to Update there is simple way of directly integrating Anomaly STAXX data into MISP .. I ended up writing my own script to export the data out and do some tagging and then import in MISP.