topic TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld? in General Topics

TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

eyunghans — Tue, 21 Feb 2017 14:09:41 GMT

Hi-

I'm working with a customer to pull a TAXII feed into MineMeld/AutoFocus which requires certificate based authentication. Is this possible with the MineMeld version within AutoFocus?

Regards

eyunghans

Re: TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

eyunghans — Tue, 21 Feb 2017 14:17:42 GMT

I've answered my own question by reviewing the current 'Issues' tracker on GitHub. Currently (as of 0.9.32) client authentication is only supported within the local instance of MineMeld.

https://github.com/PaloAltoNetworks/minemeld-webui/issues/95

Regards,

eyunghans

Re: TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

lmori — Tue, 21 Feb 2017 18:20:53 GMT

Hi @eyunghans,

planning to add it in the next release of MM WebUI.

Luigi

Re: TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

n.zamatei — Wed, 02 May 2018 13:54:23 GMT

Hi,

to retrieve IoC from a source i need a miner that supports a certificate auth. I have all the needed files (.crt, .key, .pem and .p12).

How can i use them with a MineMeld miner node??

Thanks in advance

Re: TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

lmori — Fri, 04 May 2018 08:36:30 GMT

Hi @n.zamatei,

what format/protocol is used by the IOC source?

Re: TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

n.zamatei — Fri, 04 May 2018 13:53:00 GMT

Hi @lmori, thanks for your answer.

The source is a STIX feed (TAXII protocol).

Re: TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

BarakGriffis — Fri, 17 Jan 2020 16:01:56 GMT

I have this issue as well. Where do I put the certs? How do I link the prototype the certs?