TAXII feed for SIEM

L7 Applicator

Re: TAXII feed for SIEM

Hi @jhopple,

the fix for the TAXII MIner is now available on MM for AutoFocus. Which version of AF/MM are you running on?

 

Thanks,

luigi

L2 Linker

Re: TAXII feed for SIEM

@lmori

I'm running VERSION: 0.9.44.post1 (AF)

Highlighted
L0 Member

Re: TAXII feed for SIEM

Hi @Sly_Cooper and @lmori

 

I'm trying to configure a output for FS-ISAC miner, and one of previous topic was mentioned about create a aggregator for Taxii feeds using a prototype stdlib.aggregatorIPv4Generic as model . Is it possible to share a aggregator config for example ? 

 

Also, are you guys using the stdlib.taxiiDataFeed for output or is it a custom output node ? 

 

Thanks a lot!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!