TruSTAR's TAXII Client offers users a convenient method to ingest intelligence from other TAXII services into enclaves in TruSTAR. This enables users to normalize intelligence from STIX-TAXII supported tools and leverage high-fidelity indicators within workflow tools.
- Source Type: Premium Intel
- Update Type: Feed-based
- Update Frequency: 15 minutes
- Time to Install: 10 minutes
The integration pulls all observables supported by TruSTAR.
- Supported Versions
- TAXII V1.2
- STIX V1.2
- TruSTAR API v1.3
- TruSTAR Python SDK v0.3.23
- TAXII Client may be GUI-based or CLI
- API Username
- API Password
- PEM file containing private key and certificate
- Certificate path: path to cert
- Certificate url: certificate location path
- Key Passphrase (if applicable)
- TAXII Server URL ("Poll URL")
- Collections (comma separated)
- Log into the TruSTAR Web App.
- Click the Marketplace icon on the Navigation Bar.
- Choose Premium intel.
- Click Subscribe on the "TAXII Client A" box.
- Enter the information requested and click Save Credentials & Request Subscription. (refer to marketplace tile setup below for more details on filling out tile information)
TruSTAR will validate the integration within 48 hours and send an email when the integration has been enabled.
Marketplace Tile Setup
Configure your own TAXII Client to start pulling indicators from the TAXII Server of your preference. Enter the corresponding credentials: username and password or your certificate contents; along with the poll URL and the collections you're interested in (to ingest multiple collections, enter their names separated by commas)
API Username: Username for the TAXII server to connect.
API Password: Password for the TAXII server to connect.
Content of pem file containing private key and certificate: (optional) PEM File Format Sample
Key Passphrase: (optional) Key passphrase for certificate above
TAXII server url: poll URL of the TAXII server you want to connect to poll collections from.
Collections (comma separated): Comma separated list of the TAXII server collections you want submitted into TruSTAR.
No reported issues.