In SA ,How do we integrate the third party intelligence feeds stix ,taxill and CybOX.
Is it possible to create custom feeds for the same?
Currently, the data would need to be converted into a CSV format. Then, you can create the feed using the Feed Wizard in SA or write your own custom feed definition xml file.
View solution in original post
I've also been told ECAT can import stix and taxiIl. Only in the 4.1 version.
We have not tried yet.
Yes....this is correct regarding ECAT and STIX. Can import it directly.
Since SA 10.6.1, it can do STIX.
10.6.4 has updated STIX capabilities. Check the release notes for more information