Taxii 1.x
App Vendor: TAXII
App Category: Data Enrichment & Threat Intelligence
Connector Version: 1.0.0
API Version: 1.0.0
About App
The Taxii 1.x app allows security teams to integrate with the Taxii 1.x enterprise application to discover, collect, poll and push data from/to a Taxii 1.x server.
The Taxii 1.x app is configured with the Orchestrate application to perform the following actions:
Action Name | Description |
|---|---|
Get Collections | This action retrieves all the available collections from the Taxii server. |
Poll Request | This action polls a particular collection from the Taxii server from a particular date. |
Inbox Request | This action submits an inbox request to the Taxii server. |
Configuration Parameters
The following configuration parameters are required for the Taxii 1.x app to communicate with the Taxii 1.x enterprise application. The parameters can be configured by creating instances in the app.
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
TAXII base URL | Enter the Taxii base URL without http(s)/special characters. | Text | Required | |
Discovery path | Enter the Taxii discovery path. | Text | Required | |
Username | Enter the Taxii username. | Text | Required | |
Password | Enter the Taxii password. | Password | Required | |
HTTPS verification | Optional preference to either verify or skip the https verification. | Boolean | Required | Allowed values:
Default value: False |
XML/JSON response | Optional preference to either return xml or json response data from the Taxii server. | Boolean | Optional | Allowed values:
|
Version | Enter the Taxii version [1/ 1.1]. | Text | Optional |
Action: Get Collections
This action retrieves all the available collections from the Taxii server.
Action Input Parameters
This action does not require any input parameter.
Action: Poll Request
This action polls a particular collection from the TAXII server from a particular date.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Collection Name | Enter the collection name to poll from the Taxii server. Example: "taxii_collection" | Text | Required | |
Begin Date | Enter the date from which the data must be polled from the Taxii server. Example: "jan 10 2021" | Text | Required |
Example Request
[
{
"collection_name": "taxii_collection",
"begin_date": "Jan 10, 2021"
}
]
Action: Inbox Request
This action submits an inbox request to the Taxii server.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Inbox Content | Enter the data to inbox the Taxii server. Example: "samplecontent" | Text | Required |
Example Request
[
{
"content": "samplecontent"
}
]