TAXII feed for SIEM

[jhopple]

@lmori thanks but unfortunately I'm using the MM app in AutoFocus so I don't think that would work.

[john_chua]

Hi @Sly_Cooper,

My name is john , i am quite new to Minemeld but i am also using McAfee ESM .

can you teach me step by step , on how i can intergradeMinemeld into SIEM ? 

i hope to hearfrom you soon.

with regards ,

your friend ,

John 

[john_chua]

Hi @lmori , 

My name is john , i am quite new to Minemeld but i am also using McAfee ESM .

can you teach me step by step , on how i can intergradeMinemeld into SIEM ? 

i hope to hearfrom you soon.

with regards ,

John 

[Sly_Cooper]

@john_chua - I dont manage ESM. I provided the taxii based url to the guy managing ESM and we came up with the feed in ESM.

[john_chua]

@john_chua - I dont manage ESM. I provided the taxii based url to the guy managing ESM and we came up with the feed in ESM.

@Sly_Cooper Oh i understand , can you teach me how you come up with the feed in ESM ? or also maybe you can introduce me to the person who manage it ? hope to hear from you soon.

[jhopple]

I'm still not having any luck connecting to the MM TAXII feed from STAXX. Additionally, is there any way to try out that external extension from the Autofocus hosted version of MM?

[lmori]

Hi @jhopple,

MineMeld with the fixed TAXII Miner will be soon available on AutoFocus.

About STAXX integration, do you have somes logs from STAXX you could share to troubleshoot the issue?

luigi

[jhopple]

@lmori

Log from staxx can be found here

https://forum.anomali.com/t/minemeld-feed-returns-internal-server-error/1301/6

[Woranon]

---

STAXX still couldn't retrieve feed from MM. The error was shown on STAXX as below;

Task State: Failed

HTTP/1.1 500 INTERNAL SERVER ERROR

[jhopple]

Any updated thoughts on this? Still getting the internal server error on STAXX. Still no update from STAXX forum either.