Technology and tools

What is TAXII?

Trusted Automated Exchange of Intelligence Information: a protocol for sharing STIX threat intelligence between systems over HTTPS.

TAXII is a protocol, also maintained by OASIS, for exchanging threat intelligence over HTTPS. A TAXII server hosts collections of STIX objects, and clients poll or push to them.

It lets threat intelligence platforms, SIEMs and sharing communities subscribe to each other's feeds automatically, without custom integrations for each source.

Where you learn it

See TAXII in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free