6.1 Interfaces: REST API
The TruSTAR REST API supports programmatic access to the full range of TruSTAR capabilities. The REST API offers a set of unified endpoints that you can use to access, clean, and normalize intelligence across multiple sources, then send it to specific destinations, such as teams, tools, or TruSTAR Enclaves.
To develop custom scripts or apps, you can choose either of two techniques:
- Query the TruSTAR REST API directly
- Use the TruSTAR Python SDK that can interact with the API from within any Python program
TruSTAR’s API is designed to easily integrate with most common categories of workflow tools. It includes bundled API endpoints that streamline the number of API calls you need to execute to build powerful, efficient use cases.
The TruSTAR Partner Resources Portal explains how to use the REST API to integrated with different types of security tools:
The TruSTAR platform also includes a complete TAXII infrastructure built on that API that you can use as a no code seamless, bi-directional integration via a TAXII server or client.