Technology and tools
What is STIX?
Structured Threat Information Expression: a standard JSON format for describing threat intelligence such as indicators, malware and actors.
STIX is a standard language, maintained by OASIS, for representing threat intelligence as structured JSON objects: indicators, malware, threat actors, campaigns, attack patterns, vulnerabilities and the relationships between them.
Its value is machine-readable sharing. A STIX bundle from one organisation can be imported into another's platform with its context intact, rather than as a flat list of IPs. STIX is usually transported using TAXII.