cybersec-processing-stix-taxii-feeds - Process STIX 2.1 threat intelligence feeds via TAXII 2.1
Ingests, validates, normalizes, and routes STIX 2.1 threat intelligence bundles from TAXII 2.1 servers to target platforms.
Tags
Updated: 2026-09-17Capabilities
What this skill does
- Discover TAXII server collections
- Fetch STIX bundles with pagination
- Parse and validate STIX objects
- Route objects to consuming platforms
- Publish intelligence to TAXII servers
Inputs
- TAXII 2.1 server URL and credentials
- Target platform API endpoint
Outputs
- Parsed STIX intelligence objects
- Published STIX intelligence bundles
- Updated SIEM lookup tables and blocklists
Requirements
- Python 3.9+
- stix2 library
- taxii2-client library
- Network access to TAXII 2.1 server
